Bocing’s J.S. Hurley and other grid computing 


backers look for broader application support. PAGE 6 


Visa U.S.A. wants to make it financially attractive 


for software developers to write secure apps. PAGE 7 
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‘Rich Internet tools can greatly 
improve the user experience 

at Web sites by eliminating 

the need to refresh pages 


every time users 
enter new data, 
reports Heather 
Havenstein. 


Regional Health Exchanges 
Slowly Start to Share Data 


BY HEATHER HAVENSTEIN 
Hospitals, physician practices 
and health insurers are slowly 
forming regional data ex- 
change networks that the fed- 
eral government hopes can 
one day become the backbone 
of a national health informa- 
tion infrastructure. 

Hundreds of regional health 
information organizations 


NEWSPAPER 


have been formed over the 
past several years. However, 
only a handful of the RHIOs 
have so far overcome finan- 
cial, technica! and cultural 
challenges to even begin pilot 
projects, analysts said. 

Just last week, the San 
Diego Medical Society 
launched a project to create a 
system that can electronically 
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link 35 hospitals and 7,000 area | 


physicians. 

Funding plans for the San 
Diego Medical Information 
Exchange Network are not yet 
set, and sponsors expect the 


| planning and recruitment 


phase to last at least a year. 
“Physicians have been slow 
to adopt electronic health 
records because of cost and 
Health Data, page 16 


C10 John Wade says a RHIO “has 


to be a self-sustaining model.” 


| BY CAROL SLIWA 


| installed in virtual machine 


whether users are running Mi- 





OCTOBER 10, 2005 + VOL 


5/COPY 


39 # NO. 41 


icrosoft Adopts 
Virtual Licenses 


New policies for Windows, other products may 
lower software costs for virtualization users 





Microsoft Corp. today plans to 
unveil new licensing policies | 
that will apply to Windows 
Server and related products 


environments — no matter 


crosoft’s Virtual Server soft- 
ware or VMware Inc.’s rival 
virtualization technology. 

One change will let users 
who buy SQL Server, BizTalk 
Server and other Microsoft 
server software under a per- 
processor model license the 
products according to the 
number of virtualized proces- 
sors they actually use, instead 
of the number of physical 





processors in their boxes. 
Bob Armstrong, managing 


| director of IT at Delaware 


North Cos. in Buffalo, N-Y., 


| said he hasn’t even evaluated 
} running SQL Server in a virtu- 
| al environment because of the 
| license fees that would be re- 


quired. Armstrong noted that 
with a virtualized quad- 
processor system, Delaware 
North would have to pay for 


| four instances of the databases 


under Microsoft’s previous 
policy, even if it used only two 
processors for SQL Server. 


| “We were waiting for the 


Virtualization, page 49 


Data Security Risks Missing 
From Disaster Recovery Plans 


Scope of contingency 
programs needs to be 
expanded, execs say | 


BY JAIKUMAR VIJAYAN 
Corporate officials need to 
consider disruptions from ma- 
jor information security fail- 
ures when making business 
continuity and disaster recov- 
ery plans, security managers 
and analysts said last week. 
Failure to do so, they added, 





could leave businesses dan- 


gerously underprepared to re- 


| spond to infrastructure dis- 


ruptions during a time of 
growing cyber-risks. 
“Disaster recovery plans 
that take into account only 
Security, page 16 
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Planet-Scale Grid 


in the Technology section: This week’s Future Watch re- 
ports on a circular particle collider near Geneva (left) that 
may help researchers understand how the universe was 

created. It will require a data storage grid that spans sever- 
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Grid computing use is still 
limited to compute-intensive 
batch-processing jobs, with 
few applications available for 
business transactions. 


The feds prioritize security in 
all technology purchases. 


Visa U.S.A. explores data 
protection incentives for 
merchants. 


Sun faces an uphill climb get- 
ting Office users to switch to 
its new version of StarOffice. 


Google and Sun provide scant 
evidence of how their alliance 
might benefit corporate IT in 
the short term. 


) The DHS issues a request 


for proposals for EAGLE, its 
new centralized IT services 
procurement program. 


Harrah’s Entertainment plans 
to replace Caesars Entertain- 
ment’s BI tools to expand a 
customer-loyalty program. 


EMC drops its Windows- 
based NAS array line. 


Global Dispatches: Companies 
in the Asia-Pacific region are 
starting to outsource their IT 
security operations. 


Microsoft plans to ship an 
integrated antivirus and anti- 
spyware tool next year. 


Sumitomo Mitsui Banking’s 
IT arm uses virtualization 
software to consolidate 149 
physical servers onto 14 IBM 
blade systems. 


- TECHNOLOGY 


26 Q&A: Robots Move Into Cor- 
porate Roles. Mobile robots 
are ready to play a role ina 
number of areas, including 
enterprise security and build- 
ing automation and control, 
according to ActivMedia CEO 
Jean Dietsch. 


28 Geeks Garden: A Stroll 
Through the Technology 
Landscape. Some of this 
week’s landmarks include 
blogging as therapy and 
household appliances on 
the Internet. 


30 Security Manager’s Journal: 
Quality of Life Influences 
Decision to Stay Put. C,. 
Kelly recently got some at- 
tractive job offers, but then 
Hurricane Katrina hit, and 
now she realizes that money 
isn’t the only key to job satis- 
faction. 


MANAGEMENT — 


40 The End of Fairy Tale Begin- 
nings. When your sponsor 
seems spellbound, teammates 
act like ogres and users van- 
ish, your project may be 
doomed. IT mentor Thomas 
Cutting tells how to lift the 
curse and get everybody on 
your side. 


42 Computerworld Honors: 
Relief for Nonprofit Supply 
Chains. Aidmatrix supply 
chain technology helps chari- 
table organizations improve 
their ability to manage stocks 
of food, clothing and other 
supplies for people in need. 


8 


OPINIONS 
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On the Mark: Mark Hall re- 
ports that despite recent big 
acquisitions by Oracle, the 
trend among top IT vendors is 
to buy small companies with 
valuable intellectual property. 


20 Don Tennant opens his mind 


to the thought that Microsoft 
might actually be changing its 
attitude toward competition. 


20 Bruce A. Stewart says it’s 


bench strength that pulls IT 
organizations through the 
toughest challenges. 


David Moschella wonders 
whether Microsoft can weath- 
er disruptive change any bet- 
ter than IBM did back when 
Microsoft was the upstart. 


32 Curt A. Monash takes on a 


critic of his views on data 
architecture. 


44 Bart Perkins says it takes ex- 


tra effort and a new mind-set 
to manage risk/reward con- 
tracts, but it’s worth it. 


Frankly Speaking: Frank 
Hayes was accused of playing 
politics with his column on 
Hurricane Katrina. But he was 
trying to convey that IT man- 
agers must understand that 
their work touches people’s 
lives directly. 
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IT MANAGEMENT: Columnist Jay Cline says 
your company will have trouble marketing 
to wary consumers if it doesn’t have a clear 
privacy strategy. Companies that “get it” 
will have a competitive advantage. 
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Don’t Toss Old Apps - Recycle! 
DEVELOPMENT: Arik Kilman explains 
how modernizing legacy applications can 
preserve business logic and data while 
improving the underlying technology. 
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WLAN Security 

WEBCAST: John Stehman of Robert Frances 
Group examines key wireless LAN security 
issues. Recorded live at the 2005 Mobile & 
Wireless World conference. 
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Microsoft Plans Nine 
October Patches 


After a quiet September, Micro- 
soft Corp. plans to release on 
Tuesday nine security fixes in its 
monthly release of security up- 
dates. Eight of the patches, in- 
cluding at least one rated “criti- 
cal,” are updates to the Windows 
operating system. The other 
patch, for both Windows and 
Microsoft Exchange, is rated 
“important.” 


Users Warned of 
Symantec Flaw 


Symantec Corp. has advised users 
of its AntiVirus Scan Engine to up- 
grade the software because of a 
critical security bug in the product. 
The flaw could allow an attacker 
to take control of an affected sys- 
tem, according to Symantec. Users 
of Versions 4.0 and 4.3 of the 
Scan Engine product are advised 
to upgrade to Version 4.3.12. 


Conway Joins Board 
Of Salesforce.com 


Craig Conway, who was ousted as 
CEO of PeopleSoft Inc. while Ora- 
cle Corp. was trying to take over 
the firm last year, has been named 
to fill a new seat on the board of 
directors at Salesforce.com Inc. 
The San Francisco-based compa- 
ny has become an increasingly 
fierce rival of Oracle, which now 
owns the PeopleSoft business. 
Oracle has lately increased its fo- 
cus on hosted applications. 


EC Appoints Expert 
To Monitor Microsoft 


The European Commission ap- 
pointed professor Neil Barrett, a 
British academic specializing in 
computer science and cyber- 
crime, to oversee Microsoft's 
compliance with its antitrust rul- 
ing against the company. The 
commission named Barrett a 
monitoring trustee to provide it 
with technical advice on issues 
related to Microsoft's compliance 
efforts. 
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| Proponents seek 
| more applications, 
standards support 


BY PATRICK THIBODEAU 
BOSTON 
T ISN’T HARD to find en- 
thusiastic supporters of 
grid computing, such as 
Mike Oltman, a vice pres- 
ident at Bank of America 
Corp. who manages grids used 
to analyze financial risks. The 
grids are projected to save the 
bank “tens of millions of dol- 
lars” through productivity 
gains and reduced hardware 
costs, Oltman said last week. 

But like most grid users, 
Oltman is applying the tech- 
nology to compute-intensive 
batch-processing jobs such as 
financial calculations — not to 
business transactions. 

“Grids are an architecture in 
search of applications,” said 
Joe Clabby, an analyst at Sum- 
mit Strategies Inc. in Boston. 
Clabby added, though, that 
he’s seeing software vendors 
work with grid middleware 
providers to develop applica- 
tions that take advantage of 
the technology. 

But even as vendors begin 
to release products that could 
move grid technology into 
business applications (see sto- 
ry at right), the majority of at- 
tendees at last week’s Grid- 
World conference here were 
from academic institutions, 
government agencies and com- 
panies that rely on grids to do 
the same kind of compute-in- 
tensive work that Oltman’s 
group does at Bank of America. 


Grid’s Potential 

Darren Pulsipher, IT director 
at XanGo LLC, a dietary sup- 
plement maker in Lehi, Utah, 
sees grids as having the poten- 
tial to play a role in his compa- 
ny’s business processes. But at 
GridWorld, he pointedly asked 
questions about the lack of 
progress on standards needed 
to accomplish that. And he 
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also questioned whether ven- | 
dors will adhere to standards | 
such as the Global Grid Fo- 
rum’s emerging Open Grid 
Services Architecture for Web 
services. | 
“I want tobe abletoswap | 
vendors in and out 
so I can get more- 
competitive pric- 
ing,” Pulsipher said. 
Even for technical 
applications, more 
work by vendors 
may be needed, ac- 


| cording to attendees 


at the conference, 

which was co-spon- 

sored by the Global 

Grid Forum and 

IDG World Expo Corp. 
Oltman said that what slows 

down some of his processing 

jobs isn’t any physical limita- 

tions posed by using 6,000 

CPUs on multiple grids world- 

wide. Instead, he cited the 


Grid Use on Hold for 
‘Transaction Workloads 


need for vendors to improve 
their data distribution and 
caching capabilities so users 
can take full advantage of the 
processing gains made possi- 
ble by grid installations. 
“There are still problems to 
solve,” he said. 
Many technical 
applications that run 
on grids are adapted 
by users from cus- 
tom-built programs. 
IT managers say 
broader adoption 
of grid computing 
for business appli- 
cations will require 
a more widespread 
effort by software 
vendors to include grid capa- 
bilities in their products. 

Grid adoption “is really dri- 
ven by the application,” said 
J.S. Hurley, senior manager for 
distributed software and sys- 
tems integration at The Boe- 
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ing Co. in Chicago. Both users 
and vendors “just haven’t fo- 
cused attention on these solu- 
tions,” he said, referring to 
business applications of the 
technology. Hurley noted that 
using grids for such purposes 
likely would also require busi- 
ness process changes within 
companies. 

“Theoretically, it’s possible 
to grid-enable every applica- 
tion,” said William Fellows, an 
analyst at The 451 Group in 
New York. But he added that 
he thinks the jury is still out 
on whether grid use will move 
beyond repeatable batch pro- 
cessing jobs. 

Randy Manchester, Linux 
systems manager at the 
Woods Hole Oceanographic 
Institution in Massachusetts, 
is interested in grid computing 
as a way to get better use out 
of his servers and cut IT costs. 

But a key issue, Manchester 
said, is convincing Woods 
Hole’s 1,200 end users — 
many of whom are scientists 
and engineers — that it’s in 
their best interest to share 
computing resources with one 


another. @ 57368 


Vendors Seek to Push Grids Into the Mainstream 


BOSTON 

SOME IT VENDORS are re- 
leasing products that are de- 
signed to help companies move 
grid computing into their main- 
stream business processes. 

For instance, SAS Institute 
Inc. said at GridWorld that its 
flagship SAS 9 business intelli- 
gence, data mining and statisti- 
cal analysis software now in- 
cludes grid capabilities devel- 
oped by Platform Computing Inc. 
in Markham, Ontario. SAS users 
could tap the grid features to im- 
prove their IT resource utiliza- 
tion, said Cheryl Doninger, re- 
search and development direc- 
tor for enterprise computing at 
Cary, N.C.-based SAS. 

IT managers often design 
system resource needs around 
peak usage requirements. But 
with the capabilities inherent in 
grids, they should be able to 
reduce costs by enabling end 
users to tap into unused com- 
puting cycles on machines locat- 


ed elsewhere within their com- 
panies, Doninger said. 

There's also an effort under 
way to make the leading open- 
source technology for deploying 
grids more palatable for corpo- 
rate users. Univa Corp., a start- 
up that was formed last year by 
some of the founders of the 
Globus Alliance, plans to release 
a commercial version of that or- 
ganization’s Globus Toolkit late 
this year. 

The approach being taken by 
Elmhurst, Ill.-based Univa is sim- 
ilar to that of other open-source 
vendors, such as Red Hat Inc. 
and Novell Inc.'s SUSE Linux 
unit. Univa plans to offer pack- 
aged grid software plus installa- 
tion and support services - “all 
the trappings of a commercial 
product,” said Steve Tuecke, the 
company’s CEO. 

That strategy was endorsed 
last week by IBM, which said it 
plans to support the start-up’s 
software across its eServer 


hardware line, from blade 
servers up to the ZSeries main- 
frames. IBM will also use the 
Globus technology internally. 

Ken King, vice president of 
grid computing at IBM, noted 
that Linux vendors have made 
many corporate users comfort- 
able with the idea of implement- 
ing the open-source operating 
system to run mission-critical 
applications. “We look at Univa 
as being the potential Red Hat or 
SUSE of grid,” King said. 

Another vendor that's trying 
to boost the number of grid- 
enabled applications available to 
users is Sun Microsystems Inc., 
which announced a program for 
helping software vendors adapt 
their products to grid infrastruc- 
tures. The Sun Grid Readiness 
program gives developers ac- 
cess to software and hardware 
for modifying their applications 
and for developing new grid 
application services. 

~ Patrick Thibodeau 
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Feds Make Security a Priority in IT Purchases 


Proposed rule goes into effect, requires 
new procurement practices at agencies 





BY JAIKUMAR VIJAYAN 
An interim rule published at 
the end of September by two 
federal government councils 
specifies new steps that IT 
procurement workers at feder- 
al agencies must take to ensure 
that information security con- 
siderations are an integral part 
of all technology purchases. 
The proposed rule, which 
took effect Sept. 30, incorpo- 
rates the IT security provi- 
sions of the Federal Informa- 
tion Security Management Act 
(FISMA) in the Federal Acqui- 
sition Regulation. FISMA, 
which was signed into law in 
2002, includes requirements 
that federal agencies provide 
appropriate security protec- 
tions for systems and data that 
are managed by contractors. 
The purchasing require- 
ments are designed to focus 
“much-needed attention on 
the importance of system and 
data security by contracting 
officials and other members of 
the acquisition team,” accord- 
ing to a notice that was placed 
in The Federal Register. 


Governmentwide Rule 
The notice added that the gov- 
ernment wants to provide 
“clear, consistent guidance” on 
security needs to acquisition 
officials and program man- 
agers and encourage stronger 
communication among those 
workers, IT security managers 
and CIOs. Agencies can sub- 
mit comments on the rule un- 
til the end of next month. 
Nancy DeFrancesco, chief 
information security officer at 
the U.S. Department of Com- 
merce, said that codifying a 
set of security requirements 
for technology purchases “is 
an important step toward im- 
proving the agency’s IT secu- 
rity posture.” The Commerce 
Department was given an F 
on the 2004 federal security 
report card issued earlier this 
year by the House Govern- 
ment Reform Committee. 
DeFrancesco noted that the 





agency has already incorpo- 
rated existing FISMA require- 
ments in its security policies, 
as well as the recommenda- 
tions for secure software de- 


| velopment that the National 


Institute of Standards and 
Technology published in June 
2004. With the addition of the 
interim purchasing rule, the 
Federal Acquisition Regula- 
tion, or FAR, “now formally 
backs [such] efforts by estab- 
lishing governmentwide ex- 
pectations,” she said. 

But Alan Paller, director of 
the SANS Institute, a security 
research and training firm in 





Bethesda, Md., said that mak- 


| ing the security requirements 


a part of the FAR is unlikely to 


| be very effective. 


“Systems integrators pick 
and choose the parts of the 


FAR they pay attention to,” 
| Paller said. “There are simply 


too many parts to pay atten- 
tion to all of it. Anything that 
is important must be specifi- 
cally spelled out in the con- 
tract specifications.” FAR 
clauses are typically viewed 
by integrators and contractors 
as guidelines that often aren’t 


| enforced, he added. 


The interim rule was pro- 
posed by the Civilian Agency 
Acquisition Council and the 
Defense Acquisition Regula- 
tions Council. The civilian 
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council includes members 


; ; 
| from various agencies and as- 
| sists the General Services Ad- 


ministration in developing and 


maintaining the FAR. The de- 
| fense council is a similar 


Visa CEO Says Laws, Incentives Needed 


Supports tougher 
penalties for ID 


theft and e-fraud | 


BY GRANT GROSS 
WASHINGTON 

Visa U.S.A. Inc. is exploring 
ways to reward businesses 
that enhance their security 
practices to protect against 
credit card fraud and online 
scams, the company’s CEO 
said last week. 

Visa is looking to “make it 
financially attractive” for soft- 
ware developers to write se- 
cure applications, said John 
Coghlan, who was named 
president and CEO of the Fos- 
ter City, Calif.-based company 
in July. 

During a cardholder securi- 


| ty summit here last week, 


Coghlan said Visa could also 
make card acceptance easier 
for merchants that have strong 
security practices. 

“We need a carrot as well as 
a stick to fight fraud,” he said. 
“While we know that not 
harming customers is usually 
a great incentive, we are also 
asking ourselves, ‘What other 





-Tolmprove Credit Card Data Security 


We need to give the people... 
information they can use to 


protect themselves from identity theft 
... but we're not trying to cause or 
create panic. 
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JOHN COGHLAN, 
President and CEO, Visa U.S.A. 


financial incentives can we 
create?’ ” 

Coghlan said that Visa sup- 
ports legislation introduced in 
Congress that would require 
businesses to notify affected 
customers after certain data 
breaches, as well as a proposal 
to step up the punishment 
of criminals convicted of 
data theft. 


Notification Is Key 
Businesses should be required 
to notify customers of data 
breaches based on an “analysis 
of the real danger,” Coghlan 
said. Some members of Con- 
gress are calling for customers 
to be notified after all data 
breaches, not only when 
there’s a danger of identity 
theft or credit card fraud, 

he said. 


“We need to give the people 


| out there information they can 


use to protect themselves 


sequences, but we're not try- 


| ing to cause or create panic,” 
| Coghlan told the audience of 


Visa partners. 
He also said that Visa sup- 
ports legislation that would 


| add two years in jail to exist- 


ing penalties for identity theft 


or computer fraud. 


Coghlan also called for fed- 


| eral data-protection laws to su- 


persede conflicting state and 


| local edicts. For example, 21 


states have data breach notifi- 


| cation laws that allow compa- 


nies to delay notification until 
a law enforcement investiga- 
tion is complete, while laws in 


| Illinois and New York City 


don’t allow for a delay, he said. 


| group that’s responsible for 
| creating regulations for acqui- 








sitions by defense agencies. 

In The Federal Register no- 
tice, the two councils said 
there is an increased need “to 
focus on the role of contrac- 
tors in security as more and 
more federal agencies out- 
source various information 
technology functions.” 

Their proposed rule re- 
quires contracting officers to 
seek advice from information 


| security specialists when buy- 
| ing IT goods and services. It 


also mandates that buyers ad- 
here to Federal Information 


| Processing Standards and 
| agency-specific security re- 


quirements when making 
technology purchases. In addi- 
tion, the rule establishes a for- 


| mal definition of the term 


information security. @ 57361 


Some speakers at the con- 


| ference said that businesses 


need to work together to en- 


| sure that customers don’t lose 
| confidence in electronic trans- 
| actions as a result of data 

| breaches. 


“This really is a critical 
business issue,” said Marge 


| Connelly, executive vice presi- 
| dent for corporate reputation 


and government at credit card 


| issuer Capital One Services 


Inc. in McLean, Va. “It’s not 


| just one of the concerns of 


the security department or 


| one of the concerns of the IT 


| from identity theft and its con- | 


department.” 
Others called on industry 
groups to work together to fix 


| credit card fraud and data 
| theft problems on their own 
| before lawmakers step in. 


“If industry doesn’t figure it 


| out, the judges will or Con- 


gress will,” said Mike Zaneis, 
director of congressional and 


| public affairs at the U.S. 


Chamber of Commerce, a 


| trade group representing 
| 3 million businesses. “What 
| you don’t want is some sort of 


| 
) 


statutory obligation.” 

Zaneis counted seven data 
security bills already intro- 
duced in Congress, with more 
likely on the way. @ 57340 


Gross is a reporter for the 
IDG News Service. 
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Symantec Buys 
BindView for $209M 


Symantec Corp. has agreed to buy 
security compliance software 
vendor BindView Development 
Corp. for $209 million in cash. 
The two companies provide what 
officials said is complementary 
software to help IT operations 
comply with regulatory require- 
ments such as the Sarbanes- 
Oxley Act in the U.S. or Basel Il 

in Europe. The deal is expected to 
close in the first quarter of 2006. 


IBM to Resell 
Globus Middleware 


IBM has signed a nonexclusive 
agreement to license commercial 
releases of Globus middleware 
from open-source grid software 
start-up Univa Corp. The Univa 
software replaces IBM’s internally 
developed Globus implementation. 
IBM plans to offer the Univa tech- 
nology on its AIX- and Linux- 
based systems. IBM also plans to 
use Univa’s software for internal 
grid projects. 


HP Buys RLX for 
Blade Management 


Hewlett-Packard Co. has agreed 
to buy RLX Technologies Inc. and 
plans to use its technology to im- 
prove systems management capa- 
bilities on HP blade servers run- 
ning Linux (see related item at 
right). The deal is part of HP’s 
strategy to buy management soft- 
ware to add to its product portfo- 
lio. RLX exited the blade hardware 
business last year to focus on its 
Control Tower software. Terms of 
the deal weren’t disclosed. 


Microsoft to Support 
PDF in New Office 


Microsoft Corp. said Office 12 will 
include native support for PDF 
documents when it ships next 
year. Microsoft disclosed the plan 
to partners in Redmond, Wash. 
Office 12 will allow users to save 
Office files as PDF files using the 
“save as” command. 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY BUZZ BY MARK HALL 


Small 


. and probably better, too. That seems to be the lesson 
learned by Hewlett-Packard Co., which has recently 
eschewed megadeals for a series of smaller ones. For 
example, HP’s agreement to nab RLX Technologies 
Inc., which was announced last week, practically 


amounts to 

a rounding 
error for a 
company 

its size. HP 
didn’t dis- 
close the 
price it’s pay- 
ing for RLX. 
But Richard 
Evensen, an 
analyst at 
Technology 
Business Re- 
search Inc. in Hampton, N.H., 
estimates that HP will fork 
over $30 million, primarily 

to get the blade management 
software that Spring, Texas- 
based RLX sells. Evensen 
says the practice of acquiring 
small IT vendors to boost a 
company’s competitive posi- 
tion in the market has been 
perfected by Cisco Systems 
Inc. And he argues that going 
forward, HP is also likely to 
focus on buying smaller com- 
panies with valuable intellec- 
tual property assets that it 
“can quickly and successfully 
integrate” with its existing 
products. 


oY 
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Tea Uy 
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Likewise, Computer Asso- 
ciates International Inc. has 
adopted a strategy of buying 
smaller and wiser, says Josh 
Pickus, who was CEO of Niku 
Corp. before CA bought the 
company in August. Now he 
is senior vice president and 
general manager of CA’s Clar- 
ity division, which is named 
for Niku’s IT governance soft- 
ware. CA “has retooled the 
way they do acquisitions,” 
Pickus says. “It’s not about 
squeezing profits from big, 
dying businesses. It’s about 
getting growth from new 
opportunities.” He says CA 
expects that the three compa- 
nies it bought recently — 
Niku, Netegrity Inc. and Con- 
cord Communications Inc. — 
will bring half of its growth 
in the coming years. 

Oracle Corp. CEO Larry 
Ellison likes big takeovers, as 
shown by his acquisition of 
PeopleSoft Inc. and last 
month’s deal to buy Siebel 
Systems Inc. (In a similar 
vein, Ellison cruises the globe 
in the world’s biggest yacht, 
according to Vanity Fair mag- 








azine.) But even he appears to 
appreciate small deals. Ac- 
cording to Evensen, of the 10 
acquisitions made by Oracle 
this year, five have involved 
companies with less than 100 
employees. 


Does the world really 
— yet another... 

. search engine? Maybe not 
one like Google or Ask Jeeves, 
but Ash Nashed, CEO of Con- 
goo LLC in Branchburg, N]J., 
has something else in mind. 
Congoo’s namesake software 
searches premium sites along 
with the rest of the Web, then 
lists the premium content at 
the top of the search results, 
Nashed says. 
His company 
is working on 
deals with 
providers of 
general and 
financial 
news so Con- 
goo users 
will get limit- 
ed access to 
the premium 
areas of their 
Web sites. Congoo, which 
will go live in mid-November, 
will also have tools to help 
end users share information 
with one another. 


NASHED 
Congoo lists 
Ce 
tent for free. 


Spyware keyloggers 
are trying to... 

. Steal your user authentica- 
tion codes. Aladdin Knowl- 
edge Systems Ltd., a Tel Aviv- 
based security vendor, says it 
conducted a two-month study 
of 2,000 known spyware pro- 
grams and found that 15% 
were keyloggers designed to 
steal user IDs, passwords, 
PINs and other log-in data. 
Doc Vaidhyanathan, vice 
president of product market- 
ing at Arcot Systems Inc. in 
Sunnyvale, Calif., thinks his 
company has devised a clever 
way to beat the key loggers: 
putting a random and shuf- 
fled set of characters on an 
end user’s display. That is, 





into an application, the Ar- 
cotID software sends a mix 
of characters that the user 
chooses his password from. 
As charac- 
ters get 
clicked, 
the soft- 
ware 
scrambles 
their order 
so even 
keyloggers 
that watch 
where a 
mouse goes can’t determine 
which ones have been picked. 
Vaidhyanathan says that next 
year, Arcot will ship software 
that ties end-user access to 
specific systems. ArcotID 
supports both Windows PCs 
and Macintosh machines. 
Pricing varies by the number 
of users, but Vaidhyanathan 
says that a bank wanting its 
online customers to use the 
tool could pay as little as pen- 
nies per year for each client. 


VPN Bh: 
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Networking appliance 
boosts application. . . 

. performance by offloading 
processing tasks from servers. 
Citrix Systems Inc. in Fort 
Lauderdale, Fla., this week 
will release the Citrix Net- 
Scaler Application Switch SE, 
a small, rack-mounted appli- 
ance with an awfully long 
name. According to Greg 
Smith, director of product 
marketing at Citrix’s Net- 
Scaler division, the device is 
the first to come from that 
unit since Citrix completed 
its purchase of NetScaler Inc. 
in August. The appliance is 
designed to free servers from 
having to handle a variety of 
processing tasks, such as en- 
cryption, connection manage- 
ment and data compression. 
Pricing starts at $17,500. 
57312 


when someone wants to log Citrix’s appliance juices server response. 
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Make a name for yourself with Windows Server System. Upgrading to Microsoft® Windows Server System™ 
makes it possible for eBay, the leading online marketplace, to consolidate its mail servers from 85 down 
to 25, while handling over seven million e-mails a day. Here's how: By deploying Windows Server™ 2003 


Microsoft® J: 


with Exchange Server 2003, eBay kept its growing global workforce connected while reducing the Wi ndow 
number of mail servers and sites to support, thereby cutting basic costs per mailbox by 70 percent. 


To get the full eBay story or find a Microsoft Certified Partner, go to microsoft.com/wssystem Server System 
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Sun Links StarOffice to Microsoft Suite 


Looks to win over 
Office users with 


BY CAROL SLIWA 


UN MICROSYSTEMS Inc. 


has worked to improve 

the compatibility of its 

StarOffice application 
suite with Microsoft Corp.’s 
Office. But Sun still faces an 
uphill climb as it tries to en- 
tice corporate users to consid- 
er the new version it released 
late last month. 

“Microsoft is the dominant 
platform, and it would be very 
hard to have a catalyst for a 
major switch,” said Dan 
Agronow, vice president of 
technology at The Weather 
Channel Interactive Inc. in At- 
lanta. “If you already have the 
investment, you're not going 
to throw it away.” 

Agronow noted that switch- 
ing Web browsers is relatively 
painless, since the choices 
made by end users won't af- 
fect workers throughout their 
companies. But he said that 
because Office users share 


| 
StarOffice 8 


= Improved capabilities for 
importing and exporting Office 
documents 


= Support for the new OASIS. 
Open Document file format 


s Support for XForms, a W3C 
da 
= Multipaned user interface 


documents and content, the 
potential for file incompatibil- 
ity remains a concern despite 
Sun’s attempts to address the 
| problem in StarOffice 8. 
Michael Dortch, an analyst 
at Robert Frances Group Inc. 
in Westport, Conn., said he 
thinks Sun has dealt sufficient- 
ly with the Office compatibili- 


| ty shortcomings in StarOffice 


8 to enable potential users to 
focus on cost and ease-of-use 
issues. “These are now fights 
that Sun can win more often,” 
Dortch said. 

Mike Prince, CIO at Burl- 
ington Coat Factory Ware- 





house Corp., has been receiv- 


ing 25 to 30 Office documents 
per day while using a beta 
| copy of StarOffice 8 since 
| February. Prince said the only 
interoperability problems in- 


ments out of the more than 
2,500 that he has opened. 
“With earlier versions, the 
compatibility wasn’t as flaw- 
less as what I’ve observed 
with [StarOffice] 8,” he said. 
Prince plans to upgrade the 


| Burlington, N.J.-based retail- 


er’s 350-plus stores, which 
have earlier versions of Star- 
Office, to the new release. But 
he expects workers at corpo- 
rate headquarters who now 
use Office will continue to do 
so. “People who are Office 
users are not anxious to 
switch,” Prince said. “And 
that’s fine. We’re not out to 
stamp out Office.” 

StarOffice is based on Open- 
Office.org, an open-source 
technology shepherded by an 
organization that Sun set up in 
2000. Sun announced its plan 
to improve StarOffice’s com- 
patibility with Office last No- 
vember, saying the new fea- 





DHS Moves to Consolidate 
IT Procurement Processes 


BY ERIC LAI 
The U.S. Department of 
Homeland Security (DHS) is 
centralizing its procurement 
processes for IT support ser- 
vices into a massive contract- 
ing program that could make 
up to $45 billion worth of pur- 
chases over the next decade. 

The DHS on Sept. 29 issued 
a request for proposals to ven- 
dors on the program, which is 
called EAGLE, or the Enter- 
prise Acquisition Gateway for 
Leading Edge solutions. Fur- 
ther details about EAGLE, 
which was announced in Au- 
gust, are expected to be dis- 
closed at two “preproposal” 
sessions that the DHS will 
hold for interested bidders on 
Oct. 18 in Washington. Bids for 
the initial EAGLE contracts 
are due by Oct. 31. 


Marcus Fedeli, an analyst at 
Input Inc. in Reston, Va., said 
that consolidating the sprawl- 
ing agency’s IT services con- 
tracts into a single program 
should make it easier for ven- 
dors to bid on deals. 


Savings Plan 

Fedeli also expects that the 
changes will enable the DHS 
to attract smaller vendors that 
might have been reluctant to 
bid on contracts before. And 
the new program should help 
the agency “get some cost sav- 
ings,” he said. Fedeli estimated 
that the DHS could award up 
to $4.5 billion worth of con- 
tracts under EAGLE during 
the government’s 2006 fiscal 
year, which began Oct. 1 





DHS spokesman Larry 


| Orluskie declined to confirm 


Fedeli’s estimate but noted 
that most of the planned con- 
tracts will be multiyear deals. 
In a synopsis posted on its 
Web site, the DHS said EAGLE 
is designed to provide an inte- 
grated approach for buying IT 
support services, which are 
now acquired through “a dis- 
parate collection of methods.” 
In conjunction with EAGLE, 
the DHS is also launching a 
$3 billion contracting program 
called FirstSource for buying 
commodity IT equipment. 
The list of goods that can be 
bought through FirstSource 
includes IT systems, software, 
networking equipment and 
wireless technology. 
FirstSource bids must come 
from companies with 150 em- 
ployees or fewer. As part of 
EAGLE, the DHS will also set 
aside some contracts for 
smaller firms and ask large 
companies to subcontract as 
much as 40% of their work 
| to small businesses. @ 57373 





volved fonts in about six docu- | 
| ware by adding a configuration 





tures would first appear in an 
OpenOffice.org 2.0 release that 
is still being tested. 

But with StarOffice 8, Sun is 
trying to distinguish its prod- 
uct from the open-source soft- 


tool that lets IT administrators 
manage user settings and poli- 
cies as well as a macro conver- 
sion tool, said Iyer Venkatesan, 
a product line manager in Sun’s 
client systems group. Sun has 
also improved the software’s 
ability to import document ele- 
ments from Office and doubled 
the number of rows supported 
in spreadsheets to bring Star- 
Office up to par with Excel, 





www.computerworld.com 


| Venkatesan said. 


The previous spreadsheet 
disparity, along with Micro- 
soft’s Excel Solver tool, has 
kept a small percentage of 
users on Office at the Univer- 
sity of Toronto at Scarbor- 
ough. But Sun said last month 
that the Ontario-based school 
has standardized its student 
computing resources on 
StarOffice, which has been 
used on systems in campus 
computer labs and the school 
library since January 2004. 

Philip Wright, the universi- 
ty’s director of computing 
and networking services, said 
one of the big attractions of 
StarOffice is its support for 
Windows, Linux and Solaris. 


@ 57346 


Google, Sun Leave IT Out of Picture 


EVEN CORPORATE USERS 
took notice last week when 
Google Inc. and Sun an- 
nounced that they would join 
forces to distribute Sun’s Java 
Runtime Environment, Google's 
tool bar and the OpenOffice.org 
desktop applications to “mil- 
lions of users.” 

But the two vendors provid- 
ed little evidence that the union 
will have much of an effect on 
corporate IT shops in the near 
future. The few details that 
emerged were tailored for the 
consumer market. 

“!'m just curious at the mo- 
ment. What are those guys go- 
ing to do?” said Stephen Shaf- 
fer, director of software systems 
at FLYi Inc., a Dulles, Va.-based 
airline that flies under the name 
independence Air Inc. 

Eric Singleton, ClO at Hong 
Kong-based Tommy Hilfiger 
Corp., said the rivalry between 
Google and Microsoft could be 
good for IT managers. “Any 
time you have a market leader 
and another potential competi- 
tor, it keeps things sharp and 
results in better products for 
end users like me,” he said. 

The agreement calls for Sun 
to include the Google Toolbar 
as an option in consumer 
downloads of the Java Runtime 
Environment. The companies 
also plan to explore opportuni- 


ties to jointly enhance tech- 
nologies such as the Java run- 
time and OpenOffice.org. 

“The corporate IT angle is 
what they didn’t announce,” 
said Tom Austin, an analyst at 
Gartner Inc. “The deeper | dug, 
the less there was. | honestly 
think they intended to do much 
more, but they just weren't able 
to come to agreement.” 

Austin said it isn’t clear 
whether Google plans a major 
shift to Java for its desktop 
tools, after favoring lightweight 
code that’s easy to download. 
“If anything, Google is headed 
in another direction with its 
AJAX technology,” he added. 
“If you run Gmail [or] Google 
Maps, the whole architectural 
model that Google is following 
is different than the model re- 
flected by StarOffice and 
OpenOffice.” 

But Patricia Seybold, CEO of 
The Patricia Seybold Group Inc. 
in Boston, viewed the an- 
nouncement as evidence that 
Google is in Sun’s Java camp, 
pitted against Microsoft. 

Seybold predicted that with- 
in 30 days, Sun and Google will 
announce plans to freely dis- 
tribute OpenOffice.org as part 
of Google's services - the an- 
nouncement that she said was 
expected to happen last week. 

- Carol Sliwa 





The new Canon imageRUNNER solutions and support addressed 
Don’s concerns about seamless network integration, secured printing 
and managing network devices. Hence, Don’s no longer concerned. 


f your daily challenges as the gatekeeper 


Don’s company isn’t doing business as usual. What about your company? We're well aware o 
of your company’s network. And we totally understand. That’s why Canon’s imageRUNNER® solutions are raising the ba 


r for how well network devices 


tion for document 


work and how seamlessly they’re integrated. You’ll appreciate enhanced security features that include a secured p 
for easily managing network devices. In addition, you get entirely new systems across 


confidentiality, user authentication, NetSpot®and Remote UI 


our full line of imageRUNNER solutions, which offer intuitive technology that works with you, not against you. You C. 


can also expect your current investment to be leveraged, your concerns to be addressed and the potential of your 


workday to be expanded. Which means no more business as usual. 1-800-OK-CANON www.imagerunner.com a 
nae | | umageANYWARE 





12 COMPUTERWORLD October 10, 2005 


Business Objects to 
Buy Infommersion 


Business Objects SA has agreed 
to buy information visualization 
software developer Infommersion 
Inc. for about $40 million in cash. 
Privately held Infommersion sells 
Xcelsius, an application that can 
present business intelligence data 
from back-end systems as inter- 
active charts, graphs and dash- 
boards. It can package the data in 
PDF and PowerPoint files. 


HP to Enable 


Netscape on PCs 


Starting early next year, Hewlett- 
Packard Co. PC customers will be 
able to select America Online 
Inc.’s Netscape browser as their 
default window to the Internet. 
Both Netscape 8.0 and Microsoft 
Inernet Explorer will ship on HP 
PCs in the U.S. and Canada, with 
links in the Start menu and on the 
desktop of the Windows XP oper- 
ating system. 


Firefox Marketing 
Site Is Hacked Again 


For the second time in three 
months, a Web site used to pro- 
mote the open-source Firefox 
browser was breached. Spread- 
firefox.com was shut down last 
week after members of the 
Spread Firefox community were 
notified that it was hit by attack- 
ers. The hackers had tried to 
exploit a bug in the TWiki collabo- 
ration software, which had been 
running on the server. 


Sprint Suit Charges 
VoIP Providers 


A unit of Sprint Nextel Corp. sued 
voice-over-IP providers Vonage 
Holdings Corp. and Voiceglo Hold- 
ings Inc., alleging that they're in- 
fringing its patents. Sprint Com- 
munications Co. claims that the 
companies violated seven patents 
on technology for processing and 
delivering packetized voice and 
data. The suit seeks an injunction 
against further infringement and 
unspecified monetary damages. 





Moves to convert 

Caesars IT 

systems by April 

BY HEATHER HAVENSTEIN 
S PART of an effort to 
fuel its customer 
loyalty program, 
Harrah’s Entertain- 

ment Inc. plans to replace the 


| business intelligence tools 


used by Caesars Entertain- 
ment Inc., which it recently 
acquired. 

Later this year, Harrah’s will 
replace the SPSS Inc. analytical 
tools used at four Caesars prop- 
erties in Las Vegas with predic- 
tive modeling and ad hoc ana- 
lytic tools from SAS Institute 
Inc. and BI reporting tools 
from Cognos Inc. Harrah’s uses 
those tools to link customer 
gaming and spending habits 
with marketing programs. 

Harrah’s, which completed a 
$5.2 billion acquisition of Cae- 
sars in June, is scheduled to 





NEWS 


| begin the five-month 


process of converting 
Caesars propersties in 
Las Vegas to its own IT 
systems in December. 
The project is slated 


for completion in April, y 


said Jason Pashko, di- 
rector of database, 
reinvestment and ana- 
lytics at Harrah’s. 
“Since the Harrah’s 
strategy wins out in 
this merger, the Har- 
rah’s tools also follow,” 
Pashko said. “We'll be chang- 
ing out for the most part all 
legacy systems at Caesars and 
replacing them with Harrah’s.” 
Harrah’s uses SAS 9 analyti- 
cal tools with proprietary al- 
gorithms running on a Terada- 
ta data warehouse. The system 
links information gathered 
about customer spending from 
its Total Rewards customer 
loyalty program to its cam- 
paign management and rev- 
enue management programs. 
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‘Harrah's Set to Replace 
‘Caesars BI Analytics ‘Tools | 


The company uses 
analytics to segment 
customers based on 
spending behavior and 
offer deals based on 
predictions for prof- 
itable future spending. 
Analytics also comes 
into play when Har- 
rah’s compares how a 
customer actually be- 
haved versus the be- 
havior that was pre- 
dicted. 


Po 


Fragmented Data 

With the conversion, Harrah’s 
faces a challenge in building 
new analytic frames of refer- 
ence for the additional proper- 
ties, Pashko said. 

For example, before the ac- 
quisition, Harrah’s had only 
two Las Vegas properties 
where customer data was 
compiled and analyzed to 
build marketing promotions. 
With the additional proper- 
ties, officials are grappling 
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with more fragmented de- 


| mand and expect that the Har- 


rah’s BI system can meet that 
need. “How do you under- 
stand how a customer thinks 
about those properties when 
you have six versus two?” 
asked Pashko. 

The process of converting 
Caesars’ customer loyalty pro- 
gram into Harrah’s will also 
require expanding the process 
Caesars used to analyze its 
customer base. 

“They didn’t have one cen- 
tral view of the customer,” 
Pashko said. “The second we 
convert a Caesars property, 
we'll be looking at that cus- 
tomer from a corporatewide 
perspective. We think of the 
entire business view of the 
customer.” 

Keith Gile, an analyst at For- 
rester Research Inc., said many 
companies are looking to ad- 
vanced analytics to better un- 
derstand customer behavior 
and capture more market share. 

Complexity is always an is- 
sue with predictive analytics, 
he said, noting that Harrah’s 
has to consider variables like 
casino location, local demo- 
graphics, travel dates and 
weather conditions. @ 57372 





EMC Says It’s Giving the Ax to Windows-based NAS Arrays 


BY LUCAS MEARIAN 

EMC Corp. last week said it 
plans to stop selling its line 

of low-end network-attached 
storage (NAS) arrays based on 
the Windows Storage Server 
platform. 

EMC’s NetWin 110 and Net- 
Win 200 product lines will 
stop shipping next month be- 
cause of poor sales, according 
to an EMC spokesman. He 
said the system’s high price 
tag was a key reason for the 
lack of sales. 

The spokesman said that 
Hopkinton, Mass.-based EMC 
will soon resell low-end Win- 
dows NAS systems built by a 
partner, which analysts said 
will likely be Dell Inc. 

Steve Spieler, a systems en- 
gineer at Wells’ Dairy Inc. in 
Le Mars, Iowa, leased two 
NetWin 200 NAS gateways 
last year to run Microsoft 
Corp.’s Storage Server 2003 





and is disappointed that EMC 
is discontinuing the product. 
He said he anticipates that 
EMC will continue supporting 
the systems. 

Spieler noted that he’s con- 
sidering upgrading to the next 
version of the 
Microsoft soft- 
ware, which is 
expected next 
March. “If EMC 
is out of the pic- 
ture, we may 
pick up Dell 
hardware in the 
future,” he said. 

Dell sells Win- 
dows-powered NAS systems | 
in its PowerVault line of com- 
modity servers. 

Analysts were surprised for 
various reasons when EMC 
first unveiled the Windows- 
based NetWin series of prod- 
ucts in May 2004. Some noted 
that the systems competed 


| don’t 
think EMC 
ever had its 
heart in the 
game anyway. 


Peeeeeneccesesessseeseeee 


JOHN WEBSTER, ANALYST, 
DATA MOBILITY GROUP 


with those from Dell, EMC’s 
top reseller, and were priced 
starting from $6,100, over 
three times more than Dell’s 
low-end PowerVault array. 

John Webster, an analyst at 
Data Mobility Group LLC in 
Nashua, N.H., said 
that EMC built 
the Windows sys- 
tem under pres- 
sure from Micro- 
soft. “Microsoft 
demanded it as a 
precondition to 
doing some other 
collaborative deal. 
But EMC had to 
do [it] without creating con- 
flict with its closest partner, 
Dell,” Webster said. He didn’t 
disclose details about the oth- 
er Microsoft-EMC deal. 

The EMC spokesman and 
Radhesh Balakrishnan, group 
product manager for Micro- 
soft’s Windows Server divi- 





sion, both denied that any 
pressure was put on EMC to 
build the system. 

Nonetheless, EMC avoided 
competing with its key part- 
ner by keeping its prices far 
higher than those that Dell 
was charging for its similar 
offerings, according to Web- 
ster. “I don’t think EMC ever 
had its heart in the game 
anyway, from the standpoint 
of Windows-powered NAS,” 
he said. 

Balakrishnan said that al- 
though NetWin sales were on 
the rise this year, “it made 
sense for EMC and Microsoft 
to go with a commodity hard- 
ware player.” 

“While we are not happy 
with any given partner not be- 
ing in a position to ship the so- 
lution anymore, we’re excited 
that more and more partners 
are shipping it,” Balakrishnan 
said. @ 57367 
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Asia-Pacific Warms to 
IT Security Outsourcing 


SINGAPORE 

ORPORATIONS ACROSS the Asia- 
C Pacific region are becoming more 

open to outsourcing the manage- 
ment of their IT security systems to 
third parties, according to speakers at 
the MediaConnect Asia Security Fo- 
rum here last week. 

During the conference, attendees 
said that the process of outsourcing IT 
security has started in mature markets 
such as Australia, Japan and Taiwan. As 
a whole, the region is catching up with 
other parts of the world on security 
outsourcing, said Ed Elliff, who man- 
ages VeriSign Inc.’s enterprise sales 
and marketing activities in Australia. 

Security demands generated by on- 
line applications such as 
e-commerce systems and 
Web services are prompt- 
ing corporate users to 
hand off intrusion detec- 
tion, firewall management 
and other security func- 
tions to third-party ven- 
dors, the speakers said. 

But Andy Lee, head of 
the Asia-Pacific security 
practice at Amsterdam- 
based network operator 
ENV International NV, a 








GLOBAL FACT 


cee le Meese MD 
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: unit of France Telecom SA that does 


business as Equant, said cost benefits 
are the No. 1 factor that will drive com- 
panies to outsource IT security tasks. 
mw MELISSA P. VERGARA, 

COMPUTERWORLD PHILIPPINES 


BenQ Mobile Looks to 
Boost Siemens Phones 


MUNICH 

UNICH-BASED BenQ Mobile 
Mic: officially began opera- 

tions last week. The company 
was formed through the takeover of 
Siemens AG’s mobile devices division 
by Taiwan-based electronics maker 
BenQ Corp. in June. 

The company, which also includes 
BenQ’s mobile phone unit, hopes to 
reverse an ongoing decline in the 
market share of Siemens- 
branded phones. BenQ 
Mobile is headed by CEO 
Clemens Joos, who previ- 
ously was president of 
the mobile phone divi- 
sion at Siemens, and 
Chairman Jerry Wang, 
an executive vice presi- 
dent at BenQ. 

Siemens paid BenQ 250 
million euros ($301 mil- 
lion) to assume owner- 
ship of its phone opera- 





tions and agreed to invest another 50 
million euros ($60 million) in the com- 
pany. Executives last week said BenQ. 
Mobile has more than 7,000 workers 
and had annual revenue of 5.6 billion 
euros ($6.7 billion) last year. Citing fig- 
ures from Gartner Inc., BenQ Mobile 
said it had an estimated 5.2% share of 
the worldwide mobile phone market in 
the first half of this year — making it 
the sixth-largest vendor. 


w DAN NYSTEDT, IDG NEWS SERVICE 


Showa Denko Plans 
Facility for Tiny Disks 


TOKYO 
HOWA DENKO KK, a manufacturer 
Ss: storage disks for hard drives, 
said it plans to spend 3 billion yen 

($26.5 million U.S.) to build a new re- 
search and development center that 
will focus on creating a coin-size de- 
vice that can hold 40GB of data. 

Tokyo-based Showa Denko, which 
produces disks for drive makers like 
Toshiba Corp., said the center will be 
built in Ichikawa City in the prefecture 
of Chiba, east of Tokyo. Work on the 
facility is due to be completed in April. 

Showa Denko said that researchers 
at the new center will work to develop 
by 2010 a disk that can store 1,000 giga- 
bits per square inch. At such a density, 
the planned 40GB storage capacity 
would fit on a 0.85-in. disk drive, ac- 
cording to company officials. € 57292 
mw MARTYN WILLIAMS, IDG NEWS SERVICE 
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Briefly Noted 


Lenovo Group Ltd., which took 
over IBM’s PC business five months 
ago, is setting up a distribution 
structure in Africa, its first major in- 
vestment on that continent. A facili- 
ty in Kenya will distribute PCs and 
mobile phones built around compo- 
nents made in China. Lenovo moved 
its headquarters from Beijing to 
Purchase, N.Y., after buying the 
IBM operations. 

ws MICHAEL MALAKATA, IDG NEWS SERVICE 


ENV International last week said it 
has signed a five-year, $30 million 
contract to build an IP-based com- 
munications system for Norway’s 
Ministry of Foreign Affairs. The 
system will connect the ministry's 


Chartered Semiconductor Manu- 
facturing Ltd. in Singapore has 
named Simon Yang as senior vice 
president and chief technology offi- 
cer, a new position reporting to 


m DAN NYSTEDT, IDG NEWS SERVICE 





Microsoft Unveils Antivirus, Antispyware Tools 


BY JAIKUMAR VIJAYAN 
An integrated antivirus and 
antispyware tool that Micro- 
soft Corp. plans to start ship- 
ping soon could appeal to 
small and midsize businesses. 
But larger enterprises are like- 
ly to wait for the technology to 
mature more before giving it a 
shot, users and analysts said. 

Microsoft said last week 
that its Client Protection tech- 
nology integrates an antivirus 
product that it acquired in 
2003 from Romanian software 
maker GeCAD Software with 
an antispyware tool that came 
with its December 2004 pur- 
chase of Giant Company Soft- 
ware Inc. 

A beta version of the tool 
will ship by year’s end, and a 


full rollout is slated for early 
next year. 

Both acquired tools have 
been available as free down- 
loads since the beginning of 
this year. The integrated prod- 
uct will carry an as yet unde- 
termined price tag, said Scott 
Stanzel, a senior product man- 
ager in Microsoft’s security 
technology unit. Details will 
become available closer to the 
launch date, he said. 

The new tool could be of in- 
terest to small businesses and 
home users, said Dmitriy Kali- 
ka, IT director at Amide Phar- 
maceutical Inc., a Little Falls, 
NJ.-based maker of generic 
drugs. But larger companies 
will wait to see if Microsoft’s 
product improves on what’s 





already available from pure- 
play security vendors, he said. 
“Microsoft's track record 
with security has not been all 
that great. I would rather stick 
with somebody else” than go 
with Microsoft, Kalika said. 


Security Market Entree 
Nevertheless, Microsoft’s lat- 
est announcement is another 
indication of the company’s 
ambitions in the security tools 
business, said Andrew Jaquith, 
an analyst at Yankee Group 
Research Inc. in Boston. 

“It’s a sign that Microsoft 
has looked at the aftermarket 
for Windows security and de- 
cided that it’s too large for 
them to ignore,” Jaquith said. 
“Antivirus and antispyware 


are multibillion-dollar mar- 
kets, and Microsoft wants a 
piece of this.” 

Jaquith said it’s ironic that 
Microsoft is making a move 
into a business that has been 
created largely as a result of 
holes in its own software. 

Microsoft last week also 
said that it will integrate the 
same technology into a server- 
level antivirus product gained 
when it acquired Sybari Soft- 
ware Inc. last February. 

Beta versions of the server 
product, called Antigen, will 
ship early next year. The tool 
is designed to protect Micro- 
soft Exchange and Lotus Notes. 
servers and Microsoft’s Office 
SharePoint Portal Server from 
e-mail-borne attacks. 

Microsoft CEO Steve Ball- 
mer and security chief Mike 
Nash announced the products 





in Munich last week as part 
of the company’s strategic se- 
curity update. The event also 
included the formal launch of 
the Secure IT Alliance, a Mi- 
crosoft-led group of over 30 
security vendors that will 
work on better integration be- 
tween their products and 
those from Microsoft. 

The new products and al- 
liances are part of the com- 
pany’s Trustworthy Comput- 
ing initiative, which was 
launched in January 2002, 
Stanzel said. @ 57362 


Correction 

THE NAME OF John Kish, CEO 
of thin-client vendor Wyse 
Technology Inc., was misspelled 
in the On the Mark column in 
last week's News section. 
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Continued from page 1 
Health Data 


[because] productivity drops 
for at least six months,” ac- 
knowledged Steve Carson, 
chief medical officer at the 
San Diego Medical Society 
Foundation, which oversees 
the fledgling RHIO. 

Carson expects that hospi- 
tals will begin signing up for 
the RHIO over the next year 
to use Sun Microsystems 
Inc.’s Integrated Composite 
Application Network soft- 
ware. That software will give 
the hospitals an automated 
view into patient demograph- 
ics, insurance eligibility and 
notes about emergency room 
Visits. 

The RHIO estimates that it 
will cost physician practices 
about $6 per month to use 
the system. Carson said the 
group still needs to decide 
how much to charge hospitals 
and health plans to participate 
and determine what types of 
data physicians can include in 
the system. 

The MidSouth eHealth Al- 
liance, a Tennessee RHIO 
formed a year ago by a group 
of hospitals, physician prac- 


Continued from page 1 


Security | 


the physical impact to the in- 
frastructure are shortsighted 
and need to be remedied,” 
said David Jordan, chief infor- 
mation security officer for 
Arlington County, Va. 

The county now routinely 
incorporates cyberthreats and 
other potential technology- 
related calamities into its dis- 
aster recovery planning proc- 
esses, according to Jordan. 


21st Century Threats 

It’s important that the topic 
not get lost in the wake of hur- 
ricanes Katrina and Rita, said 
John Pironti, principal securi- 
ty consultant at Unisys Corp. 
in Blue Bell, Pa. He noted that 
such disasters prompt many 
IT operations to focus on tra- 
ditional business continuity 
processes involving their 


| tices, universities, insurers 

| and others throughout three 
counties, began running a 
pilot system two months ago. 

The system has been getting 
live data feeds of lab results, 
pharmacy information and 
demographic details from 
about nine hospitals, said 
Mark Frisse, a professor of 
biomedical informatics at al- 
liance partner Vanderbilt Uni- 
versity in Nashville. 

The MidSouth RHIO, which 
isn’t yet using the data ob- 
tained for clinical care, hopes 
the pilot can demonstrate the 
value of the alliance to poten- 
tial partners. The project was 


Physicians 
have been 
slow to adopt 
electronic health 
records because of 
cost and [because] 
productivity drops 
for at least six 


STEVE CARSON, CHIEF MEDICAL 
OFFICER, SAN DIEGO MEDICAL 
SOCIETY FOUNDATION 


physical assets only. 

IT managers shouldn’t over- 
look the threat that cybersecu- 
rity incidents and other elec- 
tronic failures can also pose to 
critical infrastructure, Pironti 
said. Disaster recovery “is 
stuck in a 1970s to 1980s mind- 
set of a mainframe, a LAN and 
a glass house that need to be 
backed up,” he added. 

What is needed is an “ex- 
panded perspective of what 
constitutes a disaster,” said 
Bob Palmer, a vice president 
in IT at Lenox Inc., a Law- 
renceville, N.J.-based maker 
of tableware and giftware. 

Disaster planning “tradi- 
| tionally required that firms 
work with a single vendor 
who provided physical facili- 
ties and equipment in case of 
an emergency,” Palmer said. 
An infrastructure failure stem- 
ming from an electronic attack 
would force a company to deal 
with security firms, Internet 








NEWS 


funded with a $5 million fed- 
eral grant and $10 million from 
the state legislature. 

In the long run, MidSouth 
aims to become a utility for 
hospitals and physicians, 
Frisse said. 


Anticipated Savings 

The Kansas City Regional 
Electronic Exchange in Mis- 
souri plans to launch its pilot 
project before the end of the 
year. The project will be un- 
dertaken with Blue Cross and 
Blue Shield of Kansas City, 
Commerce Bank NA and Saint 
Luke’s Health System Inc., a 
chain of nine area hospitals. 
The goal is to test a system for 
electronically validating insur- 
ance coverage and processing 
claims, said John Wade, CIO 
at Saint Luke’s. 

The Kansas City exchange 
was formed in 2000 before 
the federal government began 
pushing the concept. It anti- 
cipates that it can save $13 mil- 
lion over three years by end- 
ing a paper-based claims- 
processing procedure that has 
40 manual steps and replacing 
it with a regional electronic 
processing system with Com- 
merce Bank, Wade said. 

The founders expect that 


service providers and law en- 
forcement agencies, among 
others, he said. 

Adding to the complexity 
is the unpredictable and 
evolving nature of electronic 
attacks and potential respons- 
es to them, thus creating a 
difficult environment in which 
to conduct tests, Palmer said. 
As a result, he noted, disaster 
recovery planning needs to 
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@ The Bush administration 
wants to make electronic health 
records available to all Ameri- 


® Officials from the U.S. Depart- 
ment of Health and Human Ser- 
vices have identified regional 
health information organiza- 
tions (RHIO) as the building 
blocks for the national informa- 
tion infrastructure to provide 
universal access to electronic 
health records. 

@ RHIO participants look to 
RHIOs to help eliminate some 
administrative costs associat- 
ed with paper-based patient 
records, provide quick access 
to automated test results and 
offer a consolidated view of 
patient history. 


the system can be funded over 
the long term using the sav- 
ings, Wade said. 

“You can’t be reliant on the 
government to just fund these 
things on a perpetual basis,” 
he said. “[A RHIO] has to be 


become “broader and [more] 
dynamic in nature.” 
Information security teams 
need to undertake security- 
threat scenario planning with 
workers who are responsible 
for business continuity pro- 
grams, suggested Roberta Wit- 
ty, an analyst at Gartner Inc. 
The team should identify 
threats that could take down a 
company’s core infrastructure 
or parts of it, she said. “Clear- 
ly, e-mail is a prime target, so 
you've got to look at how your 
business can continue without 
e-mail,” Witty said. Similarly, 
“if you have an internal or an 
external security breach, the 
first thing you’ve got to under- 
stand is whether you'll be 
replicating the problem when 
you try to recover at a recov- 
ery site,” she added. 
Disruptions resulting from 
major worm outbreaks over 
the past few years have caused 
more companies to pay atten- 
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a self-sustaining model.” 

The Kansas City exchange 
struggled mightily to get to 
the pilot stage. It took two 
years to create a governance 
model that then languished for 
another two years after a for- 
profit corporation acquired 14 
hospitals in the region and an 
insurance company changed 
owners, he added. 

Eric Brown, an analyst at 
Forrester Research Inc., said 
that while hundreds of RHIOs 
have been formed throughout 
the country, the vast majority 
are “people with a little bit 
of grant money, a mission 
statement and a PowerPoint 
stack.” 

Fewer than 10 RHIOs have 
launched pilot tests of systems 
for exchanging data, Brown 
said. Others have been strug- 
gling with the details of gover- 
nance models, addressing se- 
curity and privacy concerns, 
and trying to determine a way 
to pick vendors that all stake- 
holders will agree to use. 


@ 57366 
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For more on this topic, go to the HIPAA 
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tion to such issues, Witty said. 

Though computer security 
incident response teams are 
often ready to deal with dis- 
ruptions from a security fail- 
ure, more work still needs 
to be done, said Lloyd Hes- 
sion, chief information secu- 
rity officer at New York-based 
BT Radianz, a provider of net- 
work connectivity services to 
financial firms. 

“There’s a real need for bet- 
ter synergy and communica- 
tions between the information 
security team and the disaster 
recovery and contingency 
planning [function],” Hession 
said. “It’s a question of how 
two groups with a similar 
function can work together 
to manage risk.” @ 57371 
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OPINION 





DON TENNANT 


Past is... 


OU’LL BE SEEING a new byline in Com- 

puterworld beginning this week. It’s 

that of Eric Lai, our new West Coast re- 

porter. Keep an eye out for his stories, 

because if the past is indeed prologue, 
you'll be reading some really good stuff. 


I know, because Eric 
and I competed against 
each other in Hong Kong 
in the 90s, when he 
wrote for the technology 
section of the South Chi- 
na Morning Post, Hong 
Kong’s largest English- 
language daily, and I 
wrote for the Hong Kong 
edition of Computer- 
world. We competed 
fiercely. But we admired 
and respected each other. 

And we reveled in the competition. 

That’s why, despite covering 
Microsoft for the better part of a 
decade, I could never understand the 
company. I had long discussions with 
any number of Microsoft executives, 
from Bill Gates and Steve Ballmer on 
down, and yet I could never compre- 
hend the thought process that drove 
the company’s actions. 

I just didn’t get why Microsoft al- 
ways had such disdain for competi- 
tion. Whereas I thrived on it and 
did my job better because of it, the 
Microsoft brass would dismiss its 
significance or simply refuse to ac- 
knowledge its existence — all while 
plotting strategies to destroy it. 

So I was intrigued by last week’s 
story about Hewlett-Packard’s deci- 
sion to begin to ship its PCs with 
both Netscape and Internet Explorer 
early next year [QuickLink 57263]. 
Giving users a choice of default 
browser is a laudable move on HP’s 
part, and one that should be followed 
by other PC manufacturers. 

What really caught my eye was 
Microsoft’s response to the an- 
nouncement. In an e-mail to Com- 
puterworld’s Todd R. Weiss, a Mi- 





crosoft spokeswoman 
said the company wel- 
comes the competition. 
“Ultimately, customers 
will choose the browser 
that best meets their 
needs,” she said. “We are 
confident that most will 
continue to use Internet 
Explorer when they eval- 
uate factors such as end- 
user functionality, site 
and application compati- 
bility, developer extensi- 
bility, enterprise manageability and 
security backed by the processes and 
engineering discipline employed by 
Microsoft.” 

My initial reaction to that was the 
same as yours: “What a crock.” But 
then I thought about it some more. 
Yes, the vendorspeak was mind- 
numbing. But if I allow my mind to 
be so numbed that I can’t open it, 





AS 


then shame on me — not Microsoft. 

In fact, the company’s response 
is consistent with a subtle change 
there. It seems that there’s more of 
an acknowledgment of the value of 
competition than in the past. Sure, 
you can argue that it’s just lip service 
to appease authorities that are still 
scrutinizing Microsoft’s compliance 
with antitrust rulings. Indeed, just 
last week, the European Commission 
appointed someone to monitor its 
compliance [QuickLink a7270]. 

But at some point, we all need to 
be willing to give even Microsoft a 
break. Skepticism is healthy and, 
with just about anything that’s Mi- 
crosoft-related, warranted. Still, that 


skepticism should be tempered with 


an appreciation for any organiza- 
tion’s capacity to change for the bet- 
ter. Blindly assuming the worst 
serves no constructive purpose. 

Perhaps the past isn’t always pro- 
logue. Maybe — sometimes — it’s 
just history. Yes, I’m familiar with 
the expression about being doomed 
to repeat it. But I’m getting tired of 
the gloom. @ 57318 
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BRUCE A. STEWART 


Now Batting 
For the IT 


Team... 


VERY MANAGER in 

baseball learns the value 

of the players who “ride 
the pine” waiting for a mo- 
ment of glory late in the game. Having 
bench strength often is the difference 
between postseason success and an 
early date with the golf clubs. 

It’s the same in IT management. Suc- 
cessful IT leaders consciously develop 
bench strength to take their organiza- 
tions through challenges that appear 
unexpectedly and that require some- 
thing beyond the usual mix of skills. 

Bench strength is related to succes- 
sion planning. A great set of players of- 
fers choices for succession — but their 
real value is in dealing with changed 
circumstances. Here are some exam- 
ples to consider: 

In an organization 
that’s suddenly un- 
der market pressure, 
all free resources 
will go to meet the 
business challenge. 

Managers will have 

an advantage if they 
can call on team 
members with the 
ability to quickly an- 
alyze IT’s cost struc- 
ture, propose infra- 
structure projects 

that have near-guar- 
anteed returns and 
prune low-value ac- 
tivities. Do you have 
team members ready 
to use such capabilities along with 
their day-to-day skills? 

Perhaps in another company the 
challenge is innovation. How flexible 
are your systems? How easily could 
you create combinations that would 
create new products or services? 
While normal times call for the stan- 
dard user-sponsored project, a key 
bench strength is the ability to clearly 
articulate the art of the possible. 
Alongside this is the ability to prepare 
for more rapid change by incremental 
rearchitecturing efforts. A consultative 
approach will be needed that may not 
be a normal course of affairs. Who on 
your team is up to this? 
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A third organization may be entering 
a consolidation phase. Who on the 
team has the skills to institutionalize 
controls, management processes and 
practices to hone what has been built 
into a smoothly operating entity? The 
improvement work may not be as 
glamorous as bringing home a major 
project, but it’s just as essential for the 
IT organization’s long-term health. 

Each of these examples reveals the 
need for different personal styles. Lead- 
ership team members should be chosen 
to reflect a variety of approaches that 
can be used as circumstances change. 
A healthy bench is built on knowing 
the difference between a manager’s 
area of competence (which are based in 
experience and knowledge) and his key 
style skills (which are based in who the 
manager is). There is nothing wrong — 
and a good deal right — about tapping 
the “wrong” manager in organizational 
terms to lead an effort that he’s stylisti- 
cally suited to carry out. 

So how do you develop a bench? 
Start with yourself. What is your style? 
Which types of challenges would be 
most rewarding for you, and why? How 
could you prepare to be called upon? 
Baseball pinch hitters and utility play- 
ers must keep up their skills even while 
waiting days for the chance to play — 
often for a single at-bat. IT leaders 
looking to build their reputations when 
called from the bench must constantly 
prepare as well. A stream of warm-up 
projects can help in this preparation. 

Most of us are fortunate enough to 
work in predictable settings. But ca- 
reers are made when our bench skills 
are brought into action. Build your 
bench — and be ready with the right 
person when a challenge hits you. 


@ 57215 


DAVID MOSCHELLA 


When David 
Becomes 
Goliath 


HE EARLY DAYS of PC 

industry competition 

were typically de- 
scribed in David-vs.-Goliath 
terms, with Microsoft the former and 
IBM the latter. And as in the ancient 
tale, the younger, more nimble upstart 
quickly slew the seemingly invincible, 


but lumbering, giant. 
If you were part of the IT industry 


during the 1980s, you defi- 


| nitely remember or were 


even part of the story. If you 
are under the age of 40, you 
probably read about it in 
school or absorbed it else- 
where. 

Conventional wisdom has 
proclaimed that an arrogant, 
out-of-touch IBM failed to 
see what the PC would 
mean to the computer in- 
dustry and that Bill Gates 
simply outwitted IBM’s 
once-vaunted management 
team. There is certainly 


truth in this view. Few, if any, of IBM’s 


leaders at the time even used a PC, let 
alone saw it for the disruptive force it 
would become. 

Yet recent events might soon force 
us to reconsider this interpretation. 
Watching Microsoft try to respond to 
its challenges — Google, open-source, 
mobility, etc. — is beginning to make 
me think that even the smartest man- 
agement may find it all but impossible 
to adjust to certain types of disruptive 
change. No one can honestly say that 
Gates and Steve Ballmer are asleep or 
out of touch (arrogant is another mat- 
ter), and Microsoft may fall victim to 
its own little Davids. 





It was only a few years 
ago that much of the IT in- 
dustry lived in fear of Mi- 
crosoft and, as was once 
the case with IBM, believed 
that the courts and anti- 
trust law might be compe- 
tition’s only salvation. Way 
back in 1997, I wrote a col- 
umn called “Tyrannosaur- 
us Gates,” noting the emer- 
gence of what seemed to be 
an unstoppable predator. 
But this was before Linux 
showed that the open- 
source movement was a 


| new type of competitor immune from 


predatory pricing, and before Google 
demonstrated what network-centric 
innovation was all about. 

Now, scenarios leading to Micro- 
soft’s demise are starting to look much 
more credible. What if China and India 


| adopt Linux, not just on the server, but 


on the desktop? What if Google uses 
Web standards to put Word-, Power- 
Point- and Excel-like capabilities into 
Gmail? What if the mobile phone be- 
comes the key to the wireless, e-wallet, 
multimedia world of tomorrow? Isn’t it 
usually a sign of decline when a wor- 


| ried giant like Microsoft starts to even 
| 


consider buying much more troubled 





giants such as America Online? 

I remember talking to Gates in the 
mid-1990s and being struck by the fact 
that he considered it a personal chal- 
lenge never to let any company do to 
Microsoft what he did to IBM. He even 
acknowledged that how well Microsoft 
adjusted to fundamental change would 
be the ultimate test of his management 
skills. But while this certainly makes 
Microsoft’s story different from and 
more personally poignant than that of 
IBM, the results might well be the same. 

Harvard Business School’s Clayton 
Christensen must be smiling. His semi- 
nal work, The Innovator’s Dilemma 
(Harvard Business School Press, 1997), 


| argued that in a disruptive environ- 


ment, even the most alert and seem- 


| ingly rational decisions may not be 
| sufficient. Indeed, they can often be 


counterproductive. While the full sto- 
ry is still far from being written, Chris- 
tensen may well be proved right. If he 
is, the IBMers of the 1980s might final- 


| ly be let off the hook as we realize that 


the Davids had the advantage all along. 
@ 57221 
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Gates Is Disingenuous About CS Grads 


H, HOW VERY LITTLE Bill 

Gates should be allowed to say 
on this topic (“Gates Worried Over 
Decline in U.S. Computer Scien- 
tists,” QuickLink 55639]. You 
should clarify what he means by 
“qualified worker.” There are lots of 
qualified workers out of jobs these 
days because of offshore outsourc- 
ing and H-1B visa holders. And it's 
ludicrous for him to say that stu- 
dents aren't seeking degrees in 
computer science because there is 
no TV show about programmers. 
They aren't seeking these degrees 
because they see that they can’t get 
decent jobs in the field. 

The class I'm signed up to teach 
next semester currently has two 
students in it. With luck, some more 
may sign up during the first week, 
but | still wouldn’t expect more than 
five people in the class. Each of 
these students will spend the next 
few years hoping and praying to 
find a job when they finish their 
education. Chances are, most 
of them will not, in spite of what 


| 
| 


Gates and others are saying. 

Our government is creating the 
end of the software industry by 
handing it over to India on a golden 
platter and allowing our corpora- 
tions to rent out foreign workers. 
Anyone who is smart enough to go 
to college and earn a degree can 
see that. That's why there aren't 
more CS majors - it's pure and sim- 
ple economics. | wish you would get 
that story straight. 

Robert Manning 
Software engineer, 
Carson, Calif. 


NE OF THE primary reasons 
for youths’ lack of interest in 


| computer science is the concern 
| that their jobs will be moved off- 


shore or that immigrants will be 
brought in to perform the same 


| work for considerably less pay. As 


much as | respect Gates, | think his 
arguments on this topic do not ad- 
dress the underlying cause of the 
problem. By advocating more H-1B 
visas, he virtually ensures that the 





objective he says we should be fos- 
tering (namely more U.S. students 
entering computer science) is un- 
dermined. A more enlightened ap- 
proach might be to provide pro- 
grams at the high school, junior col- 
lege and college levels in computer 
programming and computer sci- 


| ence, with scholarships available. 


We must recognize that as criti- 
cal software development skills are 
exported, we are also exporting the 
next generation of innovation. Deep 
understanding of the internal opera- 
tion will one day be just as scarce as 
the programmers, leading to in- 
creased reliance on offshore sources 


for maintenance and enhancements. | 


Any advanced techniques in re- 
quirements definition, design, devel- 
opment, and testing and integration 
will likely also come from offshore. 
Jim Johnson 

Director of networks, 


Adsystech Inc., 


Silver Spring, Md. 


ATES’ loud worrying over the 
future of computer science in 
the U.S. seems more than a little 


| disingenuous when his own compa- 
ny is busy exporting the very jobs on 
which new computer science grads 
would have cut their teeth. Students 
| aren't blind. They simply don't see a 
long-term future in a U.S. computer 
science career. 

| marvel at the hubris of Gates 
and professor Maria Kiawe attempt- 
ing to recast the decline as a simple 
public relations problem. Yes, the 
decline is a public relations prob- 
lem, but it’s also a social one! 
A. Blake 
Atlanta 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 


| letters@computerworld.com. 


Include an address and phone 
number for immediate verification. 


For more letters on these and 





other topics, go to 


www.computerworld.com/letters 
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Robots Move Into 

Corporate Roles 

Mobile robots are ready to play a 
role in enterprise security, building 
automation and control, and other 
areas, according to ActivMedia 
CEO Jean Dietsch. Page 26 





HE INTERNET HAS represented 
a huge leap forward for many 
organizations, allowing them 
to expand the reach of their 
applications to remote 
workers, customers 
and suppliers. Un- 

fortunately, limitations in browsers 

have meant a step backward for 

the user experience compared 

with client/server applications. 

But a burgeoning group 
of users is solving this 
dilemma with new 
tools designed to pre- anh, 
serve the rich content and 
interactive features of the desktop in “rich Inter- 
net” applications that can be accessed via a thin 
client. Rich Internet applications are designed to 
provide enhancements to usability without the 
deployment and maintenance headaches of 
client/server applications. 

The new tools essentially eliminate the need to 
refresh a Web page every time a user enters or re- | 
ceives new data. They allow businesses to more 
easily move existing client/server applications to 
the Web or build new Web applications. Compa- 
nies are using the tools for e-commerce and call 
center applications that require complex interac- 
tions with users. They also use them for applica- 
tions that need to run on various devices. 

Traditional HTML-based applications are built 
as Static, page-based applications that require an 
HTTP request to a server every time data needs 
to be refreshed. However, applications on the 
Web often require heavy interaction with users. 
For example, a customer service application 
could require a call center representative to enter 
information from a customer while also accessing 
a technician’s service schedule. These types of 
applications can’t work efficiently with the laten- 
cy that comes with constant page refreshes. 
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Rich Internet applications improve 
the user’s experience over the Net 
and skip the deployment 
and maintenance hassles 
of client/server apps. 
BY HEATHER HAVENSTEIN 


Refresh 
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Key characteristics of rich 
Internet applications: 

™ Must be accessed by the 
user without a separate in- 
stallation process 

® Must support local applica- 
tion processing on the client 
® Must support an event- 
driven user interface that 
extends beyond the tradition- 
al page request/response 
model of HTML 

@ Must support connectivity 


| and synchronization with 
| server-side processing 
| @ Must be usable in band- 


width-constrained network 
environments like dial-up 

® Should provide a “high- 
fidelity” user interface that 
matches the look and feel of 
a desktop GUI 

® Should operate efficiently 
within multiple browsers and 


| on multiple operating sys- 


tems 
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Rich Internet applications include a rendering en- 
gine in the client that can cache data and communi- 
cate back and forth with the server while still dis- 
playing the Web page for the user. The engine can 
process user requests to provide a more responsive 
user interface and fewer round trips to the server 
than HTML-based applications do. While HTML is 
a simple straightforward language for building static 
applications, adding any type of interaction within 
the user interface often requires a lot of scripting 
from developers. Rich Internet application developer 
tools are designed to plug into popular integrated de- 
velopment environments (IDE) while providing the 
windows and tabs needed to add interactive features 
without a lot of coding. 


Keeping the Record Straight 

When SunGard Data Systems Inc. wanted to move its 
client/server mutual fund shareholder application to 
the Web, the company opted to use rich Internet 
technology to migrate the system. 

The company’s Investar-One shareholder record- 
keeping system for mutual fund clients has 400 to 
500 screens, and using traditional HTML program- 
ming to build the graphical user interface (GUI) for 
the Web would have taken too long and wouldn’t 
have delivered adequate content, says Mark Judah, 
chief technology officer at SunGard’s Investar-One 
business unit in Wayne, Pa. 

“There’s a lot of activity that takes place with fi- 
nancial market interfaces, and users need a lot of in- 
formation on the screen that ... can be quickly inter- 
preted,” Judah says. “Traditional browser-based tech- 
nology is very much HTML-based. Where you have 
a simple Web page that is thin, however, you're not 
able to obtain as rich a user experience as might be 
required. In just porting over our traditional fat- 
client GUI to a browser-based presentation, we 
would have had to redesign most screens.” 

Instead, SunGard in early 2005 began using tech- 
nology from Boston-based Nexaweb Technologies 
Inc. to migrate Investar to the Web, a project that the 
company plans to roll out into production in the sec- 
ond half of next year. Nexaweb’s technology includes 
developer tools that can be plugged into most Java 





_ TECHNOLOGY 


IDEs to build Web application user interfaces with 
XML instead of HTML. Developers can choose to 
have the code execute in the client or on the server. 
The XML engine in Nexaweb 4.0 can process most 
user interface operations locally, allowing data to be 
incrementally updated on the client without refresh- 
ing pages. 

“We will be able to take our GUI application in its 
entirety and port it without having to do a lot of re- 


| design,” says Judah. “We won't have any installation 


on the desktop, and by avoiding ongoing mainte- 


|} nance on the desktop, we will continue to reap cost- 


savings rewards.” 

By 2010, at least 60% of new application develop- 
ment projects will include rich Internet application 
technology, according to IT research firm Gartner 
Inc. In addition, at least 25% of companies using rich 


Internet applications in their development shops will | 


rely primarily on the technology for developing Web 
applications, Gartner notes. 

Optimal Payments Inc., a Montreal-based electron- 
ic payments processor, used the Flex presentation 
server and programming model from Macromedia 
Inc. in San Francisco last year to move a custom-built 
customer support application to the Web. The appli- 
cation is used by 50 customer support representa- 
tives to log and route trouble tickets. 

With Flex, Optimal Payments was able to move the 
application in three months with only a single devel- 
oper, says Dimitrios Gianninas, rich Internet applica- 
tion developer at the company. 

“It just cost the salary of one developer to get it 
done,” he says. “With the other application, we had 
to buy it, pay for maintenance and fly in people to 
customize it. The costs were enormous compared 


sions to ASP.Net 2.0 that 
can be accessed through 
Visual Studio 2005. 

Microsoft is targeting 
companies such as South- 
em Co., an Atlanta-based 
power company. 

According to Michael 
Peters, a technical consul- 
tant at Southern, the rule 
of thumb at the company 
is this: If the application 
needs a rich interface, it 
stays client/server. If not, 
the developers build a 
Web application. 


www.computerworld.com 


to what we accomplished with Flex.” Optimal Pay- 
ments is developing two applications with Flex — 
one for adding new merchants and another to allow 
its finance department to perform residual sales cal- 
culations — and it plans to move all new develop- 
ment from JavaServer Pages to Flex, Gianninas says. 


Rebuilding E-mail 

EarthLink Inc., an Atlanta-based Internet service 
provider, is using open-source tools from Laszlo 
Systems Inc. to rebuild its HTML-based Web e-mail 

| application into a rich Internet application, says John 
Foltz, EarthLink’s product manager for e-mail and for 
the rich Internet application. 

“Web mail in general — including ours — is built 
with HTML, which means it looks and behaves like a 
series of Web pages. It makes it awkward to use and 
slow,” he says. “Rich Internet technology will allow 
users to send or receive mail in the background 
while they’re doing something else. Once the appli- 
cation loads up in your browser window ... there are 
no more page refreshes.” 

EarthLink plans this month to wrap up develop- 
ment of the beta product of its rich Internet applica- 
tion, which already has 3.5 million users. 

Vendors, meanwhile, are readying rich Internet 
tools with an eye toward the developer. San Mateo, 
Calif.-based Laszlo, which markets an open-source 
platform for developing rich Internet applications, in 
July announced plans to team with IBM to propose 
an IDE project to the Eclipse Foundation Inc. that 
would allow developers to use the open-source 
Eclipse tools to build rich Internet applications. Las- 
zlo debuted its open-source OpenLaszlo tools this 
month, and they have been downloaded more than 
60,000 times, according to company officials. 

Peter O'Kelly, an analyst at Burton Group in Mid- 
vale, Utah, says Asynchronous JavaScript and XML 
(AJAX) and other rich Internet programming tech- 
niques represent a tacit acknowledgement that pro- 
gramming HTML pages was “cruel and unusual pun- 
ishment” for developers. 

“It used to require some very advanced develop- 
ment to build Web applications,” he says. “Main- 
stream developers can take advantage of these new 
capabilities without being annoyed with things like 
the fact that Internet Explorer does things one way 
but Firefox does it another way. It is about raising the 
level of abstraction, so developers don’t have to un- 
derstand the plumbing.” 

Macromedia last week announced plans to re- 
structure its licensing model for its Flex program- 
ming tools and eliminate the requirement that enter- 
prises must buy its presentation server in order to 
get the development software, says Jeff Whatcott, 
vice president of product management. 

The company also announced new technology that 
will support data streaming, so a user could, for ex- 
ample, get immediate notification when a stock trade 
clears or another transaction is processed. 

In addition, the technology is designed to allow 
users to do contextual collaboration, he says. For ex- 
ample, a user looking at a business intelligence dash- 
board could chat online with the analyst who pre- 
pared the data for the dashboard, and the two users 
could work together to change data, Whatcott says. 
| @ 57102 
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In repeated time trials, the SDLT 600 never reached the cheese, or even left the starting line 
for that matter. Perhaps tapes don’t like cheese. However, as for data backup capacity, the 
SDLT 600 is a clear winner. It has more capacity and more speed than LTO-2 and AIT-3. It also 
includes DLTSage™ diagnostic management software and DLT/ce™ archival WORM functionality. 
How do we know? It’s been tested. For more info and to see the whitepaper, visit DLTtape.com. 
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MOVE 
INTO 


ActivMedia’s Jeanne Dietsch 
says mobile robots make 
good corporate citizens. 


Although robots have 
long been essential to 
manufacturing, other 
industry sectors have 
been slow to adopt the 
machines. Companies 
like ActivMedia Robotics 
LLC are trying to change 
that. ActivMedia designs 
intelligent mobile robots, 
sensing systems and controls for enter- 
prise use. The Amherst, N.H.-based firm 
has more than 2,000 units in the field, 
says CEO Jeanne Dietsch. She spoke 
about robots and their future in IT with 
Computerworld national correspondent 
Robert L. Mitchell. 


What is a mobile robot? Think of a PC 
connected wirelessly with wheels on 
it. That’s what it is, with motors con- 
necting the wheels to the PC. Inside 
we have a server and a client [and] an 
off-board client, which we call the 
command and control system. 


What technology advances have made mo- 
bile robots more viable for business use? 
You can pull [the robot] out of the box, 
and you start the robot learning the 
building by driving it around with a 
joystick. As soon as it has learned the 
building and created a floor plan, it can 
drive around on its own. We could not 
have done that four years ago. 


You sell the PatrolBot as a roving security 
device that includes audio, a navigational 
laser, a video camera and other sensors. 
Why would | use that in the enterprise? You 
would use a robot to increase reliabili- 
ty, to increase flexibility, to increase re- 
dundancy, to provide better situational 
awareness to the staff, to reduce risk to 
the staff and to save money. 
[PatrolBot] provides situational 
awareness to the other guards. To be 
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looking at something and to see the 
floor plan, see where the robot is in the 
floor plan and what it’s looking at per- 
haps from a 360 view and a pan-tilt- 
zoom view, that gives you what’s called 
situational awareness. 


How does PatrolBot find and interact with an 
intruder? The standard PatrolBot has 
two-way audio. It also has text to 
speech, and it can play WAV files. The 
video is pan-tilt-zoom, and we have a 
360-degree camera. You can also get 

a configuration of the robot that will 
flash startle lights. One thing security 
loves is that you can see the people 
walking by the robot because of the 
laser, even in the dark. So you can see 
their footprints moving across the 
floor plan. 


LOTT ere eet 
founded ActivMedia Robotics in 1995. 
She helped develop the Pioneer, a robot 
created collaboratively with Real World 
Interface, which later became the re- 
search division of iRobot Corp. She 
oversaw the development of PatrolBot 
TPAC ER UC Ru Nace orate 
software development tools for robot- 
ics. Previously, she founded Activ- 
UUM cries ePIC OLLI C RL 
ket research company, and led Talmis, 
an IDG market research start-up. 





The robot can set up what’s called a 
laser checkbox, and if anyone walks 
through this particular area, the robot 
will notify the guard. Some of the ro- 
bots have some sort of access control 
system, a card reader or iris scanner on 
them. So they can say, “You must iden- 
tify yourself now.” 


And if you don’t? Well, it has alerted 
central control, so if central control 
doesn’t get an identifying tag, depend- 
ing on the facility, all the doors can 
lock or someone can come racing 
down and get you. 


What other tasks can it perform? For insur- 
ance purposes, you have to check tags 
on fire extinguishers and defibrillators 
to make sure that they are in operation. 
The robot can go there, automatically 
zoom in [and] take a high-resolution 
photograph. Each of those photo- 
graphs is time- and location-stamped. 

If you have the system integration 
module, you can link up with a third- 
party control system. In that case, if it’s 
integrated, the Honeywell alarm can 
call the robot to the door. Eventually 
you'll be able to follow the person, but 
now it just tells the person, “You must 
swipe your card.” It can notify the 
alarm system of its location. 


What role can robots play in the data center? 
Energy optimization, RFID reading 

for tracking servers and assets within 
the center, surveillance and trouble- 
shooting, particularly in remote facili- 
ties. Also, you may have alarms coming 
from within the [computer monitoring] 
systems, and the robot can be called 
automatically to go and investigate. 


Can it communicate with other IT systems? 
We've set ours up to communicate 
with text or XML via our ARCL com- 
mand language. This is good because 
it’s compatible with both embedded 
controllers and PCs. Many building- 
automation systems are functioning 
with embedded controllers. 

If you’re going to use it for energy 
conservation, it’s got to be talking to 
the rest of the building, to your HVAC 
and the rest of the systems. To move 
around the building, it may have to talk 
to your elevators, to electronic doors. 

In the developer software that 
comes with it, there’s a system integra- 
tion module that uses simple text that 
just permits the system to send data 
into your security system or your 
Tivoli system or whatever. The inter- 
face development module takes things 
like the floor plan and allows you to 
export those and the video from the 
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ActivMedia’s PatrolBot 


Pan-tilt-zoom camera 
Range-finding sensors 
Gas sensor 

360-degree video camera 
cate We Ur} 


Microphone 


robot into your own application. 


What does it cost to buy, configure and 
maintain a mobile robot? It would start 
around $40,000. There is a 10% per 
year maintenance fee. We recommend 
that you clean the laser cavity and the 
laser once a month. Quarterly, you 
should change the batteries and do 
some other cleaning. 


How do you envision these robots working 
with building-automation systems? People 
are most interested right now in ener- 
gy optimization because energy is such 
an issue. The thing people like most is 
that the robot is moving in the middle 
of the space where people move. You're 
not going to hang six sensors in the 
middle of a hallway, but that’s really 
where you want to know what the tem- 
perature is. That’s why people like the 
robot. It goes where the people go. 


What will be the next big thing in mobile ro- 
bot technology? The forefront is in out- 
door three-dimensional navigation. We 
are working on things like, How do I 
follow a road in a private facility? 

For the IT community, what they’ll 
want is better manipulation [of objects]. 
Now we're doing some simple manipu- 
lation, what’s called a one or two de- 
gree of freedom manipulation. Right 
now we can transport things, we can 
carry, we can sense, we can look. But 
being able to adeptly manipulate things 
is what the next challenge is. @ 57101 
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et-scale 


N 2007, scientists will begin 
smashing protons and ions to- 
gether in a massive, multination- 
al experiment to understand 
what the universe looked like 
tiny fractions of a second after the Big 
Bang. The particle accelerator used in 
this test will release a vast flood of data 
ona scale unlike anything seen before, 
and for that scientists will need a com- 
puting grid of equally great capability. 

The Large Hadron Collider (LHC), 
which is being built near Geneva, will 
be a circular structure 17 miles in cir- 
cumference. It will produce data in the 
neighborhood of 1.5GB/sec., or as many 
as 10 petabytes of data annual- 
ly, 1,000 times bigger than the 
Library of Congress’ print col- 
lection. The data flows will 
likely begin in earnest in 2008. 

As part of this effort, which 
is costing about 5 billion euros 
($6.3 billion U.S.), scientists are 
building a grid using 100,000 
CPUs, mostly PCs and work- 
stations, available at university and re- 
search labs in the U.S., Europe, Japan, 
Taiwan and other locations. Scientists 
need to harness raw computing power 
to meet computational demands and to 
give researchers a single view of this 
disbursed data. 

This latter goal — creating a central- 
ized view of data that may be located 
in Europe, the U.S. or somewhere else 
— is the key research problem. 

Centralizing the data virtually, or 
creating what is called a data grid, 
means extending the capability of ex- 
isting databases, such as Oracle 10g 
and MySQL, to scale to these extraor- 
dinary data volumes. And it requires 
new tools for coordinating data re- 
quests across the grid in order to syn- 


chronize multiple, disparate databases. | 


“It’s all about pushing the envelope 
in terms of scale of robustness,” says 
Tony Doyle, project leader of Grid Par- 
ticle Physics (GridPP) project, a U.K.- 
based scientific grid initiative that’s 
also part of the international effort to 


eat aes 


develop the grid middleware tools. 

Researchers believe that improving 
the ability of a grid to handle petabyte- 
scale data, split up among multiple 
sites, will benefit not only the scien- 
tific community but also mainstream 
commercial enterprises. They expect 
that corporations — especially those 
involved in fields such as life sciences 
— will one day need a similar ability 
to harness computing resources glob- 
ally as their data requirements grow. 

“If this works, it will spawn compa- 
nies that will just set up clusters to pro- 
vide grid computing to other people,” 
says Steve Lloyd, who chairs the GridPP 
Collaboration Board, based at 
the Rutherford Appleton Labo- 
ratory in Oxfordshire, England. 
GridPP is working with the in- 
ternational team to develop the 
grid the LHC will use. 

CERN, the European labora- 
tory for particle physics, is lead- 
ing the LHC and its grid effort. 
From CERN’s facility near 
Geneva, the data produced by the par- 
ticle accelerator will be distributed to 
nine other major computing centers, in- 
cluding the Brookhaven National Labo- 
ratory and the Fermi National Accelera- 
tor Laboratory in the U.S., says Fabio 
Hernandez, grid technical leader at one 
of the major project sites in France. 

As part of a backup plan, each of the 
10 centers will have two-tenths of the 
total data, so that each one will be re- 
sponsible for its own 10% plus a dupli- 


| cate of the 10% held by another center, 


says Hernandez. In total, some 150 uni- 
versities and research labs worldwide 
will be connected to this system, all 
providing some degree of processing 
capability. The operation will be run- 
ning on versions of the Linux operat- 
ing systems running on clusters of In- 
tel Corp. and Advanced Micro Devices 
Inc. processors. 

Developing the grid involves a com- 
bination of efforts. In April, the LHC 
team conducted a test, distributing the 
data to 10 major sites at a total rate of 


Aparticle collider 
leads data grid developers 
Mila tO unprecedented 


ue 


dimensions. 


ee 


600Mbit/sec. Much of the work was 
“low level,” says Hernandez, such as 
adjusting parameters of a network card 
and firewall configurations. 

“Tt was important to prove that we 
can maintain the processes for an ex- 
tended period ... almost without hu- 
man attendance,” says Hernandez. This 
means ensuring that network intercon- 
nects are tuned and synchronized and 
that there’s sufficient security and 
monitoring, as well as staffing and au- 
tomation, at the respective data gather- 
ing sites, he says. 

The more difficult aspect is provid- 
ing simultaneous access to the data by 
as many as 1,000 physicists working 
around the world. “You cannot ... pre- 
dict what the users will want in any 
given moment,” says Hernandez. 

One limiting factor that’s getting a 
lot of attention from the approximately 
100 developers working on the grid 
worldwide has been the capabilities of 
resource brokers — the middleware 
that submits the jobs and distributes 
the work. If the processing isn’t effec- 
tively routed, databases can crash un- 


The site of the LARGE HADRON COLLIDER 


der heavy loads, says Doyle. There’s 
also a need to ensure that the system 
has no single point of failure. 

This involves keeping track of the 
data. The data could be in one place 
while the CPU resource capable of 
processing it is in another. Metadata, 
which describes what the data is about, 
will play a critical role. “These are 
some of the big challenges,” says Doyle. 

“The most important thing is to 
show that the grid model can be used 
to process real data in a scientific con- 
text — and data distributed all over 
the world,” says Hernandez. “I think 
it’s the most important lesson we are 


going to learn.” @ 56649 
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Edinburgh | Others 
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A STROLL THROUGH THE TECHNOLOGY LANDSCAPE 


The Typing Cure 


In a survey of bloggers conducted by America 
Online Inc. in July, just 16% of the respondents 
said they blog because they're interested in 
journalism. Only 12% said they blog to break or 
stay ahead of the latest news and gossip, and 
just 8% said they blog to share political views. 
It seems that many of the 600 bloggers sur- 
veyed keep their online journals for personal 
reasons — nearly 50% of the respondents said 
they write a blog because it serves as a form of 
self-therapy. Fifty-four percent said they like to 
share their thoughts and feelings with others, 
and 43% said they like to chronicle their life 
and interests. One-third of the bloggers said 
they most often write about self-help and self- 
esteem topics. Thirty-one percent said that in 
times of need or high anxiety, they turn to ei- 
ther writing in their blogs or reading the blogs 
of others who are discussing similar issues - 
that’s six times the number of people who 
prefer to seek help and counseling from a pro- 


TATTLE) 
Goes Electronic 


The Electronic Numerical Integrator 
and Computer (ENIAC 


troy 


said they feel free to write on 
“anything and everything.” 


66% 
12% ieee ate 
29% ire wii. 
23% inven 
65% hic tao 


negative or abusive comments to their blogs. 


fessional (5%) and just one percentage point 
less than the 32% who said they seek advice 
from family and friends. 

On average, survey respondents said they 


decimal, rather than binary, arithmetic 
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GROVES OF ACADEME 


Coffee Pots on 
The Internet 


It’s time to rethink how we control our 
homes and appliances, now that we live 
in the Internet Age, according to a Universi- 
ty of Arizona professor. 
“We now have high-end appliances that 
have powerful computers and 
are high-priced,” says Fei-Yue 
Wang, a professor of systems 
and industrial engineering. 
“Upgrading is costly. But now 
that we are living in a connect- ‘i 


ed world, we can have a con- > 
Fei-Yue Wang 


nected lifestyle and much 
cheaper, more energy-efficient 
devices.” 

Wang's idea is to connect inexpensive, 
reconfigurable, “dumb” appliances to a cen- 
tral operations center that provides “smart 
control agents” (autonomous software algo- 
rithms). Each appliance would have just 
enough memory space and processing 
power to host one or two control agents for 
specific functions. 

Wang cites VCRs as an example. Ifa VCR 
was set to record, it would send a request to 
a central computer asking for the control 
agent that would do the recording at the 
speed the user specifies. When it was done 
recording, it would delete the control agent 
for recording and ask for a control agent that 


write and maintain two blogs. Consumer blog- 
gers said they spend an average of four hours 
per week writing their blogs. 

According to the Pew Internet & American 
Life Project, about 8 million Internet users said 
they have a created a blog, and according to a 
Technorati Inc. study, the number of blogs in 
existence doubles about every five months. 
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would rewind and play the tape. 

By parsing the functions, the VCR would 
require much less computing power than it 
would need otherwise, and it could be up- 
graded with software. You probably wouldn't 
consider buying a new one unless there was 
a major hardware upgrade and the new 
model wasn't too expensive. 

Wang envisions two central controllers - 
one in your house and another 
at the appliance company's 
headquarters. 

“The company headquar- 
ters will have a super opera- 
tions center that will learn the 
habits from each individual 
house by various data mining 
techniques,” he says. “It will 
know, for instance, what times of day you 
use your refrigerator and how often you 
open the door and how long you leave it 
open.” That information will help in manag- 
ing the energy efficiency, increasing perfor- 
mance and lowering cost, says Wang. 

He also envisions control agents that are 
specifically configured for your needs. The 
company that produced the appliance or a 
third-party company could take the data 
from your household, design custom control 
agents and retrain your appliances via the 
Internet while you sleep. 


Page compiled by Tommy Peterson. 
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Quality of Life Influences 
Decision to Stay Put 


Offers of big bucks and status arrived about 
the time that Hurricane Katrina hit, and 

our security manager found that drama of 
human suffering influential. By C.J. Kelly 


HERE ALWAYS comes a 

time in a security man- 

ager’s life, and usually 

more than once or 
thrice, when she has to make 
a decision about whether to 
stay in her current job. That 
time just came my way, and I 
wouldn’t have expected be- 
forehand that I would end up 
turning down two six-figure 
jobs in a row to stay 
and work for one of 
my state’s poorest 
agencies. 

A lot of things in- 
fluenced my decision, 
but the recent disas- 
ters wrought by hur- 
ricanes Katrina and Rita got 
me thinking a lot about life — 
the significance of it, the qual- 
ity of it and the shortness of it. 

Even though I am located 
far away from the Gulf Coast 
towns that were affected by 
those storms, I was glued to 
CNN’s Web site during the 
day and its TV news channel 
during the evening. I had a 
hard time sleeping at night as 
my thoughts lingered on my 
husband, my children and 
grandchildren, my parents, my 
sisters and brothers, my aunts 
and uncles, great aunts, 
cousins and grandmother. 
Some of them live in South 
Florida or Texas, but fortu- 
nately, none of them was 
harmed during the recent hur- 
ricanes. They’re all OK, but 
I’m still stressed out by the 
events. 

It was in the midst of those 
weeks of restless nights and 
high emotional stress that I 
was contacted by a former 
employer who wanted me to 
come back to my old job. Then 
a local company that had hap- 


SECURITY 
MANAGER'S 
JOURNAL & 


pened upon my résumé got in 
touch with me. I even received 
an e-mail from a very large 
company in another state that 
wanted to talk to me about a 
director of security position 
| with at least 100 direct re- 
ports. 
| These overtures were above 
| and beyond the handful of 
| e-mails I usually receive every 
week from various 
consulting compa- 
nies inquiring about 
my availability. 
Those show up be- 
cause I had formerly 
been an indepen- 
dent security con- 
sultant, and my résumé is still 
in a large number of company 
databases. From what I can 
see, the demand for security 
professionals is still very high 
and is seemingly climbing. 
Meanwhile, in response to 
the hurricanes, the SANS 
Institute, working with the 
American Red Cross, put out 
a call for security volunteers. 
Most of the work was cen- 
tered in our nation’s capital. 
That’s too far a commute for 
me to volunteer, but I signed 
up anyway, hoping that my 
talents could help in some 
capacity. I really wanted to 
make a difference amid all 
the human suffering brought 
on by those storms. 


Once the decision was 

made, the energy | felt 

toward my existing job 
was amazing. 








So, that’s where my head 
was at when I was faced with 
making a decision about my 
career. My mind may have 
been on overload, but I found 
myself thinking for the first 
time about putting my career 
on the back burner. I couldn’t 
help but think about how valu- 
able the time I have with my 
family is and how that time 
may be short. What good is 
money if you don’t have the 
people you love or they don’t 
have you? 


| Money vs. Stress 


Some of you may be wonder- 
ing what the conflict could 
have been. I’ve spent plenty of 
time in this column bemoan- 
ing the inadequate funds my 
agency is given to address 
some very pressing security 
issues. And yet here I was ig- 
noring offers of better jobs 
with better pay and fewer 
budget constraints. 

Here are my answers to my- 
self: Information security pro- 
fessionals are in high demand, 
but the opportunities available 
to them often require exten- 
sive travel, 60-to-80-hour 
workweeks, high stress, high 
drama, tons of responsibility 
and always the fear of a major 
security breach that could af- 
fect the organization’s stability 
and threaten your job. That’s a 
lot of pressure. I used to be up 
for that, but not anymore. I 
want to sleep well at night 
without the aid of Ambien. I 
want to see my husband every 
night and talk to my children 
and greet my neighbors. 

In my current job, I face the 
same technology challenges 
I’ve always dealt with in my 
career, but not on a grand 
scale and not on a time-to- 
market schedule. I still see 
the same security issues, such 
as analyzing output from the 
intrusion-detection system, 
making sure that all systems 


| are patched and up to date, 
and enforcing policies and 
procedures. I just don’t have 
jet lag and won't gain 10 
pounds from eating out every 
day — and I get to sleep in my 
own bed at night. I’m slowly 
learning how to live ona 
much smaller salary, and 
every time I sit with my hus- 
band in the evening, sipping 
wine, talking and watching the 
sunset, I know I made the 
right decision to stay put. 

Once the decision was 
made, the energy I felt toward 
my existing job was amazing. 
Saying no to those offers 
helped me put to rest my long- 
ing to return to the big bucks, 
the big title and the status that 
goes along with it. I embraced 
the projects on my desk with 
renewed enthusiasm: security 
awareness training, disaster 
recovery planning, IT security 
change control, VPN imple- 
mentation, IDS expansion, 
upgrades of staff skills. 

I had almost forgotten how 
much there is for me to do 
here. Security work, just like 
IT work, can go unnoticed. 
The saying goes something 
like this: “If nothing breaks, no 
one complains, and if nothing 
goes wrong, you know you are 
doing a hell of a job!” I can 
make this place better, and 
although I won't get a big fat 
paycheck and will be but a 
small fish in a large state 
pond, it doesn’t matter to me. 
I have what I need in life: the 
people I love. I want to spend 
as much time as God gives me 
with them. DB 


This week's journal is written by a real 
security manager, “C.J. Kelly,” whose 
name and employer have been disguised 
for obvious reasons. Contact her at 
mscjkelly@yahoo.com, or join the dis- 
cussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 
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Kaspersky Products 
Hit by Security Bug 
Kaspersky Lab in London has 
been hit by a security bug af- 
fecting a wide range of its anti- 
virus products. The bug isn’t 
limited to a particular platform 
and can be exploited through 
several common protocols to 
take over a protected system. 
The Kaspersky flaw is in an 
antivirus library used to parse 
cab files. It could be exploited 
via protocols such as SMTP, 
SMB, HTTP and FTP, accord- 
ing to an advisory. Products 
affected include Kaspersky 
antivirus 4.x and 5.x and Kas- 
persky SMTP-Gateway 5.x. 
Phishers Can Now 
Be Sued in Calif. 
Phishing is now a civil offense 
in California, and people can 
sue the senders of deceptive 
e-mails that try to steal per- 
sonal data. Victims can seek 
to recover actual damages or 
$500,000 for each violation, 
whichever is greater. Bruce 
Schneier, chief technology of- 
ficer at Counterpane Internet 
Security Inc. and a Computer- 
world columnist, called the 
law “a feel-good measure 
that’s not going to have much 
actual effect.” He said ven- 
dors should be held responsi- 
ble for fraudulent transac- 
tions, “because they're the 
ones who can do something 
about the core problem.” 


Software Pirate 
Pleads Guilty 
infringement and will pay 
Symantec Corp. and $95,000 
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C/C++ Interpreter 
Tools Released 


® Softintegration Inc. in Davis, 
Calif., has released its Ch 5.1 and 
Embedded Ch 5.1 C/C++ inter- 
preter tools. The products let de- 
velopers perform cross-platform 
scripting, 2-D and 3-D plotting, 
shell programming and embedded 
scripting, the company said. 

The Standard Edition of Ch 5.1is 
available for Windows, Linux, Mac 
OS X, Solaris, HP-UX and Free- 
BSD as a free download; the Pro- 
fessional Edition starts at $399, 
and Embedded Ch 5.1 starts at 
$1,499 per operating system. 


Secure Calendaring, 
Mail App Launched 
@ Meeting Maker inc. in Waltham, 
Mass., has launched its new 
Meeting Maker Mobile Powered 
by Intellisync application. It pro- 
vides secure mobile calendaring 
and e-mail capabilities through a 
variety of mobile devices, accord- 
ing to the company. The product 
is available now at $100 per user 
for the standard version or $160 
per user for the premium version, 
which connects to a Lotus Notes/ 
Domino or Microsoft Exchange 
server. It can be used as an add- 
on module for the company’s 
Millennium personal and group 
scheduling suite or as a stand- 
alone wireless e-mail and person- 
al information manager product, 
Meeting Maker said. 


SAS Adds Support 
For Grid Computing 
@ SAS Institute Inc. announced 
plans to add support for grid 
computing to its SAS 9 business 
intelligence platform. The new 
features will allow SAS users to 
grid-enable multiple applications, 
including data mining and data 
integration, according to the 
company. The added support 
resulted from an expansion of 
SAS’s partnership with Platform 
Computing Inc. SAS is also a 
member of IBM's Grid and Grow 
program. Pricing for the products 
varies by customer. 
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Counterpunching in 
The DBMS2 Debate 


ECENTLY, I’VE BEEN writing a great deal 
about data architectures for the future, of- 
ten under the rubric of “DBMS2.” This has 
ruffled some feathers, including those of 
database textbook author C.J. Date. Sum- 
marizing the whole debate in this limited space is hope- 
less, but here is a quick tour through some issues that 
traditional database experts seem to be overlooking. 


1. Logical and physical model- 
ing will never be completely sepa- 
rable. A DBMS is, first and 
foremost, an execution en- 
gine for Data Description 
Language/Data Manipula- 
tion Language. To say that 
logical modeling need not 
take performance into ac- 
count is to say that DDL/ 
DML programming need 
not take performance into 
account. Wrong. No matter 
how great your optimizing 
compiler is, you still can 
write a slow program; the same princi- | 
ple applies to DBMSs. Indeed, it’s even 
more valid for data modeling than for 
some other kinds of programming. 
The higher the level your mistakes are, 
the harder it is for the optimizer to fix 
them — and little is higher level than 
database design. 

2. “True relational” DBMSs are very unlikely 
ever to be practically useful, except perhaps in 
narrow niches. The gurus claim that a 
true relational DBMS would allow 
the complete separation of logical 
and physical modeling. But as noted 
above, that will never be practical, at 
least not in a broad-spectrum, indus- 
trial-strength product. Date’s beloved 
“TransRelational” architecture doesn’t 
magically invalidate this point. As for 
claims of “orders of magnitude” of 
performance improvement, even if 
they are true, benchmarks and proto- 





types are a far cry from versatile, 


industrial-strength reality. 

3. Enterprises don’t fully con- 
trol their data models. A coher- 
ent, enterprisewide data 
model may be a wonderful 
idea, but it’s not something 
you can implement with 
any precision — unless you 
get your whole company to 
run a single-vendor suite of 
applications, and perhaps 
not even then. Purchased 
apps — and acquired com- 
panies — mean that your 
data model is largely de- 

fined by other folks. 

4. Duplicated data is not inherently bad. 
Some database gurus abhor duplicated 
data, based on the presumption that it 
is hard to keep this data consistent. 
Taken to the extreme, this would pro- 
scribe all of data warehousing. Most 
of the gurus know better than that, 
of course, and would quickly concede 
that read-only duplication is OK, if 
deployment economics demand it. 
Rather, what they deplore is duplicat- 
ed data that is updated in two or more 
places. But haven’t they ever heard 
of an index? Also, every DBMS main- 
tains duplicate copies of data as part 
of its essential workings. Perhaps 
these are both contrived examples, 
but they serve to illustrate a key point: 
Duplicated data is bad only insofar 
as the effort to keep it consistent is 
burdensome. 

5. Saying that the relational model (RM) is 





based on mathematics proves almost nothing. 
The oft-repeated mantra that the 

RM is based on 2,000-plus years of 
mathematics is ludicrously irrelevant 
— after all, the same claim could be 
made of astrology. Yes, the RM is based 
on formal logic and set theory, which 
are two intertwined branches of math- 
ematics. And yes, because of the math, 
the RM ensures data integrity with rel- 
atively little programming effort. But 
ensuring data integrity is only one part 
of the programming challenge. You 
also have to create actual functionality 
and user interfaces, and the whole 
thing has to perform in real-world 
environments. To my knowledge, 
there has been very little in the way 
of theorem-proving that has shown 
the RM to necessarily be ideal for 
those aspects of the development task. 

6. IT isn’t just concerned with facts. The 
whole predicate-logic view of data 
management assumes that databases 
are merely collections of facts. Up to a 
point, that’s indeed true. But the whole 
point of any nontrivial “analysis” is to 
produce conclusions that, while fact- 
based, aren’t absolutely certain, and 
some of these conclusions should and 
do wind up right back in the database. 

What’s more, knowledge workers 
spend a large fraction of their time 
communicating in words, often by 
e-mail. They also read documents 
and create things. None of those 
activities are dominated by absolute 
facts in the same way that, for exam- 
ple, order entry is. 

Summing up: Relational theory has 
its place. But taken to extremes, it’s 
silly or even counterproductive. In- 
deed, your biggest data management 
problems going forward will probably 
be ones for which relational theory 
doesn’t offer much help. @ 57274 
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IT MENTOR 
The End of Fairy Tale Beginnings 


When key stakeholders act like ogres, your 
project suffers. Project management 


professional Thomas Cutting tells how to break 
the spell and get them on your side. Page 40 


COMPUTERWORLD HONORS SPOTLIGHT 
Relief for Nonprofit Supply Chains 


Aidmatrix supply chain technology helps 
charitable organizations manage stocks of 
food, clothing and other supplies for 
people in need. Page 42 
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OPINION 

Leveraging the Risk/Reward Contract 
Managing risk/reward contracts requires extra 
effort and a new mind-set, says Bart Perkins, 
but the benefits are worth it. Page 44 





AY ROLLINS wants to rein in unneces- 

sary spending. He wants to leverage 

the size of his company to get better 

prices and services from vendors. 

And he wants to clearly articulate 
how technology projects help his company 
reach its strategic goals. 

So Rollins, vice president of IT at 
Churchill Downs Inc. in Louisville, Ky., 
now requires business cases for proposed 
IT projects. 

He says the requirement will help the 
company better analyze risks, 
predict successes and hold executives 
accountable. “I’m looking at it for the bet- 
terment of the business,” Rollins says. 

These days, IT and business executives 
are often asked to build business cases to 
justify technology initiatives, and many are 
making developing the business case part 
of their standard operating procedures. 

“The CIOs I talk to are much more 





aware that IT is expensive, and if you’re 


going to use it properly, you have to have a 
plan,” says John Hummel, enterprise CIO 
and senior vice president of information 
systems at Sacramento-based Sutter 
Health, a nonprofit holding company for 
65 heath care organizations. 

Business managers normally take the 
lead in developing business cases for pro- 
jects that benefit their departments, even 
though there may be a large IT compo- 
nent. But building a business case is a 
group effort, and IT leaders need to know 
how to contribute. Moreover, on certain 
projects such as infrastructure improve- 
ments that benefit the entire company, the 
business case may require an IT lead. 

Crafting such formal analyses isn’t easy, 
particularly for department leaders who 
are busy handling day-to-day operations. 
“It’s very difficult to put together a good 
business case,” says Christopher Kowalsky, 
senior vice president and CIO at Educa- 
tion Management Corp. in Pittsburgh, one 

of the country’s largest providers of 

private postsecondary education. 

It takes time and resources, a deep un- 
derstanding of the technology and how 
to scale it, and a clear view of how the 
project meshes with other priorities in 
the organization, he says. 

Here are seven steps that should help 
you efficiently build a solid business 
case: 


JAMES O'BRIEN 
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Accurately predicting the costs and benefits of IT initiatives is a critical skill. Here's how. }3\ 
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Understand Your Business Goal 


IT leaders say a strong business case forecasts costs 
and savings, details expected benefits and risks, and 
clearly shows how the proposed project fits with the 
organization’s strategic vision. “You shouldn’t think 
of [the project] as an IT improvement. You should be 
thinking of it as enhancing a business benefit: What 
benefits are you providing to the core function of the 
organization?” says Charles Maxson, CIO at Merri- 
mack College in North Andover, Mass. 

Hummel understands that his technology initia- 
tives must pass a high bar to get the green light. After 
all, he says, they’re competing for funding against 
requests to buy more patient beds or CAT-scan 
machines. 

As a result, Hummel says, his business cases show 
how a technology project will improve patient care. 
“You have to build business cases that use language 
the other executives understand,” he explains. 

That’s important because his cases go before an 
executive committee where the CEO, the chief oper- 
ating officer and the chief medical officer, along with 
divisional and operational executives, decide 
whether to approve proposed projects. 


Let the Numbers Talk 


Start with numbers. Include project costs, ongoing 
maintenance expenses and estimatedreturns on 
investments, says Rebecca Wettemann, vice presi- 
dent of research at Nucleus Research Inc., a firm 
in Wellesley, Mass., that provides IT advisory and 
research services. 


Present Various Scenarios 


Gather the best available data on costs and benefits, 
and understand the data’s accuracy and variability, 
Wettemann advises. “A lot of building business cases 
around ROI is, ‘What do I expect and what's the 
worst-case scenario?’ ” she says. 

Judith Spitz, senior vice president of network sys- 
tems at Verizon Communications Inc. in New York, 
says she strives for business cases that show how a 
specific project will streamline processes, thereby 
saving money. She points to a business case for voice 
portals a$ an example. She calculated an ROI for the 
new automated system based on an estimated reduc- 
tion of the number of calls handled by customer ser- 
vice.representatives. 

But many projects won't have benefits that are 
easy to quantify, experts say. Consider customer rela- 
tionship management applications. How does a com- 
pany accurately calculate additional sales stemming 
from an increase in customer satisfaction? In those 
cases, Wettemann says, estimate conservatively. 

“One of the key things we talk about with CIOs is 
that building an effective business case has nothing 
to do with coming up with a perfect ROI,” she ex- 
plains. “It’s really about structuring your evaluations 
with the costs and benefits so you can use those cal- 
culations to make a good business decision.” 


Consider Your Culture 


Corporate culture affects what goes into a business 

case, how much detail is included, how long it is and 
who presents the case in what form and when. Some 
companies want just a few pages summarizing costs, 
returns, risks and benefits. Others want comprehen- 
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sive reports and supporting documents along with 
oral presentations. 

Even within the same company, different types of 
projects might call for different types of business 
cases. Ted Benham, vice president of IT at Jennmar 
Corp., a Pittsburgh-based company that provides 
ground-control technology for the mining and tun- 
neling industry, developed a business case when his 
department wanted to upgrade the company’s enter- 
prise resource planning system. 

The project required much more detail in the busi- 
ness case than was needed for another recent but 
smaller investment in business analytics software, he 
says. For example, the larger case not only addressed 
the financial information but also outlined the ex- 
pected disruption to everyday operations. 


Give Nonfinancials Their Due 

While today’s economy has companies placing more 
value on bottom-line benefits, experts say IT execu- 
tives shouldn’t ignore nonfinancial benefits in their 
business cases. In fact, some essential initiatives will 
have no financial benefits, such as software that 
helps a company comply with the requirements of 
the Sarbanes-Oxley Act. In that type of business 
case, the IT leader needs to explain the facts as part 
of the larger project analysis. 

And leaders should apply the same principles to 
sell visionary ideas even if they can’t quantify poten- 
tial returns. “The more progressive.and innovative 
companies understand that maybe 80% of the proj- 
ects have to be financially driven and the other 20% 
could have a major strategic impact on the business,” 
says Michael Cummins, CIO and clinical professor of 
management at the Georgia Institute of Technology 
College of Management. “You have to go beyond 
what the numbers show.” 

For example, Merrimack College is installing wire- 
less capabilities as well as console PCs and multi- 
media in its facilities to create smart classrooms. 
These projects have significant one-time costs as 
well as maintenance costs going forward, Maxson 
says. But the business cases stressed that the tech- 
nologies will help the college stay competitive. 


Include Collateral Costs 


Good business cases need to address implementa- 
tion and long-term costs and foreseeable risks and 
benefits. But executives also need to address periph- 
eral but still critical issues, experts say. They should 
detail how they’ll train workers and promote the 
adoption of,new technologies and processes, for ex- 
ample. And they;should give an accurate estimate of 
customization Costs — something that’s often over- 
looked or underestimated. 


Consult Business Partners 


Successful managers call on other business execu- 
tives when drafting business cases, and that,goes for 
IT leaders as well. Wettemann says business folks 
write up cases for technology initiatives at some 
companies, while CIOs work with finangial officers 
at other organizations. “It tends to be a team effort 
when it’s most successful,” she says. 

Executives at Novell Inc. understand that, says 
CIO Debra Anderson. 

Anderson, who is based in Provo, Utah, works 
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closely with other executives at the Waltham, Mass.- 
based company to build annual business plans that 
forecast projects three years out. “It’s a great way to 
create linkage between my department and the over- 
all company direction,” she says. 

Business cases need to clearly explain the business 
value of each initiative. They need to show how it 
aligns with the company’s overall goals as well as 
with a business unit’s objectives. And they have to 
demonstrate that the upgrades and new systems will 
truly improve how the company does business. 

CIOs who are experienced in developing business 
cases say the process helps their companies priori- 
tize IT projects alongside other departments’ initia- 
tives so that the company moves forward as a whole. 


@ 56984 





Pratt isa Computerworld contributing writer in 
Waltham, Mass. Contact her at marykpratt@ 
verizon.net. 
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Beginnings 
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Spellbound stakeholders 
can chain your project to 
the dungeon of disaster. 


Here’s how toliftthe 


curse for a happily-ever- 


after ending. 
By Thomas Cutting 


“AND THEY ALL LIVED 

happily ever after.” 

That’s how fairy tales 

end. Unfortunately, 
IT projects are more likely to have fairy tale 
beginnings than endings. 

As our story opens, the project is held captive 
by the wicked stepsponsor who doesn’t care 
about you or the initiative. An overcommitted 
team lead is clearly bewitched, and an under- 
productive technical resource plays the role of 
ogre. Add an evil troll oversight manager and a 
gaggle of invisible users, and even Pixar would 
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says you and your project can live happily ever after if you conquer the five enchanted stakeholders. 


have a tough time managing a PG rating. 
Riding his faithful steed, the project manager 
gallops in to save the day ... and gets blind- 
sided by the antagonists in the first act, de- 
stroying all hope for the project. 
These characters aren’t really villains; in 


is crucial to the success of your project. But 
they’re spellbound by their current mind-sets. 
Unless you can cast a counterspell to disperse 
their negative energy, the risk to the project is 
overwhelming. 

Here are some ways to identify enchanted 
stakeholders and release them and the project 


from almost certain doom. 


The Wicked Stepsponsor 

The sponsor’s role is vital. He is expected to 
approve milestones, supply funding and run 
interference for the project. Either an ally or a 
foe is better than someone who lacks interest 
in the project entirely. If your sponsor acts as 
the project champion, you have to resist adding 
extras, but you can work with his energy. If he 
is against the project, help him identify the rea- 
sons it should be dropped instead of fighting a 
losing battle. If your sponsor isn’t involved, 
however, the risk of not fulfilling the project 
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objectives spikes. Watch out for any of the following 
signs of evil: 

@ Whenever your project is discussed, the sponsor 
switches the topic of conversation. 

@ Status meetings are regularly canceled. 

@ Funding for any other project pillages your 
budget. 

But you can break through that cold exterior and 
engage the uninterested sponsor. Here’s how: 

Think like him. Understand his priorities, how he 
best receives information (e-mail, voice mail, face 
to face), his group’s pressures and the direction in 
which he wants to move. This knowledge will in- 
crease the effectiveness of your communication. 

Keep communications brief. News flash: Sponsors 
have a limited amount of time. Lengthy reports and 
e-mails get ignored. Tailor the status reports and use 
Gantt charts or graphs to communicate faster. 

Determine and communicate project benefits. Projects 
are undertaken for a reason. What pain was this one 
intended to stop? Is it a regulatory requirement, or 
someone’s pet idea? Quantifying the expected bene- 
fits allows the sponsor to weigh them against project 
costs. A simple projection of return on investment, 
focused on the sponsor’s pressures and priorities, 
will communicate the benefits. 

Create and articulate the goal. Using the identified 
benefits, create a short statement that explains what 
you plan to accomplish. A good example would be 
“to accept online purchases, reducing transaction 
fees and saving $100,000 annually.” Equipping your 
teammates with a goal gives them focus and helps 
them articulate it. 


The Troll Oversight Manager 

You won’t always be the lead manager, and unless 
you're a control freak, this shouldn’t present a prob- 
lem. Manage your resources and deliverables, and 
report progress to the manager who oversees the 
milestones and direction of the overall project. But 
he can conjure up trouble if he redirects your re- 
sources and efforts. Watch out for the following troll- 
ish tip-offs: 

@ He scrutinizes the schedule and accepts the ac- 
tivities and basis of estimate (BOE) yet demands a 
10% cut. 

@ Instead of discussing progress, issues and risks, 
he drills immediately into the details of the data- 
mapping diagram. 


@ He redirects your resources to tasks outside your | 


scope of effort. 

Here’s how you can charm the troll: 

Discover why he needs control. Is he new to the role? 
Does he lack confidence in your abilities? Does he 
feel threatened? Knowing the cause of his anxiety 
will help you tailor your approach to increase his 
confidence in you and himself. 

Be sure of your BOE and expiain it. But don’t get defen- 
sive; logical conversations spark enough arguments. 
Create a detailed schedule. Incorporate the BOE in 

the schedule with comments on key activities or 
tasks. Use the 80-hour rule (assign resources only 
to tasks that require less than 80 hours of effort) to 
replace padding with realistic estimates. 

Track actual hours and estimates to complete (ETC). Cap- 
ture actual task-level hours and ETCs from the indi- 
viduals who do the work. The team members can 





Trolls, Ogres 
And Other 
Undesirables 


Here’s how this cast of characters 
looks in the real world: 


The Uninterested Sponsor: Given the proj- 
ect but focused in a completely different direction. 


| 
The Controlling Oversight Manager: 
Should be at the 30,000-foot level but craves details... | 
Thinks the project manager can’t hack it and steps in | 
to take over. 


The Overcommitted Team Lead: Has his | 
hand in every project. Loves to be involved in every- 
thing from architecture to coding but never has time 

for your project. 


The Underproductive Technical Re- 
source: Never on schedule. Always has a creative 
excuse but is like a dead weight on the project. 


The Invisible Users: Don't want the project, as- 
suming they even know about it. Although it will make 
their jobs easier, they are too swamped by their own 

priorities to participate. 


| 
- Thomas Cutting | 


ignore your estimates, but if they determine the esti- 
mate, they own it. 

Understand and articulate your status. Clearly commu- 
nicating accomplishments, destination and direction 
diminishes the manager’s need to step in. 

Show some backbone. Heroes need to sound con- 
vincing. Be sure of your facts and speak confidently. 
If a question arises that you are unprepared to dis- 
cuss, request time to research before answering. 


The Bewitched Team Lead 


He brilliantly designs solutions and finds flaws that 
could destroy system usability. Unfortunately, he can 


offer only a passing comment while dashing to his ar- | 


chitecture review board meeting. Your project is low 
on his packed priority list. Signs of sorcery include 
the following: 

® He is committed to every project conceived be- 
cause he is the go-to person for the perfect solution. 

®@ The one meeting of yours he attended ended 
with, “That won’t work, let me get back to you.” 

@ He still hasn't. 

Here’s how to break the spell: 

Team an analyst with him. The analyst can meet one 
on one with him and be the project liaison, taking the 
team lead’s ideas and driving them to completion. 
This reduces dependency on the team lead while de- 
veloping other people's skills. 

Determine the priorities of all projects. Yours may still 
be the lowest one on the list, but by officially declar- 
ing that, you can set stakeholder expectations. You 
may even be able to convince your formerly uninter- 
ested sponsor to raise the status of the project. 





| The Technical Resource Ogre 


| To compensate for the overactive team lead, you 


have the company’s least productive resource. His 
defense for surfing the Web is that the project man- 
ager hasn’t assigned him enough work. Your chal- 
lenge is to make him contribute. Here’s how you can 
recognize the ogre: 

@ Everything he delivers is late but accompanied 
with very creative excuses. 

@ He requires help to complete assignments but 
seldom asks for it before it’s too late. 

@ Whatever he delivers has bugs. 

Your own incantations can light a fire under the 
unproductive technical resource. Here’s how: 

Find out why he is unproductive. Does the ogre need 
training? Has he been promoted over his head? Is he 
overcommitted or being subjected to outside influ- 
ences? Many causes have relatively simple solutions. 
Resolve the problems, and you may gain a loyal, valu- 
able asset. 

Mandate status reports. The simple act of reporting 
accomplishments each week will illuminate his lack 
of effort. It won’t be long before he realizes it and 
starts asking for more work. 

Reduce dependency on him. Sometimes it isn’t feasi- 
ble to reform a poor performer, and it may be neces- 
sary to work with your human resources department 
to remove him. 


| The Vanishing Users 


| Sometimes users just disappear. They may be con- 


tent with the current system. Change may require 
more work or, worse, the new system may replace 
them. Sometimes they are not informed of the 
change and are not involved in defining the solution. 
Here are the traits that can render users invisible: 

@ They don’t want any change. Who needs central 
heating when you can rely on dragon’s breath? 

@ There are still problems and discontent from the 
last upgrade. 

@ They’re sure they could design a better system 
themselves. 

But you can get invisible users to show themselves. 

Identify the users and get to know them. Without under- 
standing the users of the product, you can’t deliver 


| anything useful. 


Include them in the kickoff meeting. If you have already 
had it without them, schedule another one. Involve 
them in the process. Let them show you how to im- 
prove their lives. Great enhancements come from 
users, and their involvement will reduce the learning 


curve. 


Set expectations. Expectations define the standard 
for project success. If users set their own, you will 
inevitably fall short. Work with them to weigh their 
expectations against your requirements, budget and 
schedule. 

You will face other perils in your epic journey 
to project excellence, but if these five are aligned 
against your initiative, they will kill it every time. 

If you use these suggestions to combat the wizardry, 
however, there’s a good chance that you and every- 
one else will live happily ever after. @ 56982 
Cutting is a project management professional and se- 
nior principal consultant at Keane Inc. in Cypress, Calif. 
Contact him at Thomas.Cutting@keane.com. 
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Relief 


FOR NONPROFIT 
SUPPLY CHAINS 


— itrix technology helps charitable 
ganizations better manage stocks of 


a clothing and other supplies for 
people in need. BY MARY K. PRATT 


Aidmatrix 
Foundation Inc. 


WHO THEY ARE: A Dallas-based non- 
profit that develops Internet-based 
software to help other nonprofits deliv- 
er food and clothing, as well as build- 
ing, medical and educational supplies. 


EMPLOYEES: 11, most of whom previ- 
ously worked at i2 Technologies. 


BUDGET: About $1.4 million annually, 
most of which comes from grants and 
donations. Receives another $3 million 
to $5 million in donated products and 
services annually. 


BACK IN 2000, JAN PRUITT, CEO of the 
North Texas Food Bank in Dallas, was 
well aware that she was having prob- 
lems with the agency’s supply manage- 
ment system. But she also knew that 
she didn’t have the resources to buy 
and manage commercial software to 
correct the inefficiencies. 

“We knew it was out of our budget,” 
says Pruitt. “We don’t spend money on 
those things when we can spend our 
money on a tractor-trailer full of 
peanut butter.” 

Her dilemma didn’t go unnoticed. 

In fact, the food bank’s supply sys- 
tem would become the proving ground 
for a new idea being developed across 
town. That same year, the nonprofit 
Aidmatrix Foundation Inc., also based in 
Dallas, was just getting off the ground. 
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An offshoot of i2 Technologies Inc., 


| a for-profit maker of supply chain 


management technology, Aidmatrix 
had a goal to develop Internet-based 
software to help humanitarian organi- 


| zations better manage their supplies. It 


all began when a new i2 employee who 


| had worked with relief efforts in war- 





torn Kosovo e-mailed the company’s 
president and founder, Sanjiv Sidhu, 
alerting him that i2’s products could 
have a significant effect on relief work. 

Sidhu decided to work with an em 
ployee charitable organization, the 
i2Foundation, to develop the idea. 
Foundation members picked the North 
Texas Food Bank to test the concept, 
says Keith R. Thode, Aidmatrix’s chief 
operating officer. 

Working with unlimited licenses for 
i2’s TradeMatrix platform, foundation 
workers built the Online Agency Or- 
dering program for the North Texas 
Food Bank, which went live with it in 
2001. The system allows the homeless 
shelters, women’s shelters, after- 
school programs and food pantries 
that get supplies from the food bank to 
view inventory lists and order online. 

“The technology and the willingness 


| of Aidmatrix is making food banking 


an entirely different industry than it 
would have been,” Pruitt says. 

The cost of getting that first system 
up was about $1 million, excluding the 
value of the donated licenses, Thode 


says. The i2Foundation and the group’s | 


founder and CEO, Lekha Singh, under- 
wrote the cost. 





Although Pruitt hasn’t calculated 
how much the system has saved, Aid- 
matrix has statistics showing a 50% in- 
crease in agency order-fill rates, a 10% 
reduction in agency spending for sup- 
plemental purchases and a 10% reduc- 
tion in administrative costs for the 
North Texas Food Bank. 

“This kind of technology can really 
increase the greater good,” says Mark 
Hillman, a senior research analyst at 
AMR Research Inc. in Boston. 


Filling an Urgent Need 


Other organizations have had similar 
success with Aidmatrix software. The 
Washington-based National Associa- 
tion of Free Clinics started using Aid- 
matrix’s Free Clinic Link to help dis- 
tribute donated and discounted med- 
ical supplies to its members. 

Although the amount of materials 
moving through the system is still 
small, Executive Director 
Bonnie Beavers says one clin- 
ic saved enough on one order 
to pay for its annual associa- 
tion dues. And she says the 
system has freed up her time 
to pursue higher-level tasks, 
such as lobbying lawmakers. 

Aidmatrix, which split 
from the i2Foundation in 
2004, has expanded dramati- 
cally in the past four years. 

It developed platforms for 
charities working for hunger, 
medical and disaster relief. Thode says 
its inventory control system for disas- 
ter relief is undergoing its first live 
test, as Adventist Community Services 
uses the program in Gulf Coast relief 
efforts. 

Aidmatrix also built the Virtual Aid 
Drive, an Internet-based tool that al- 
lows companies to collect donations 
online. Thode says numerous compa- 
nies are now using it to raise money 
for Hurricane Katrina relief efforts. 
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Challenges still remain, however. 

One is “getting the clients to under- 
stand what we're trying to do for them 
says Aidmatrix program manager 
David Natali. Nonprofit officials tend 
to be less familiar with supply manage- 
ment best practices than their for-prof- 
it counterparts, so Aidmatrix workers 
teach them efficient processes 
along with the technology. 

Funding is another big 
challenge, according to Aid- 
matrix President and CEO 
Scott McCallum. A former 
governor of Wisconsin, 
McCallum says he wants to 
continue raising money from 
donations and from corpora- 
tions that realize tax benefits 
by giving to charities through 
Aidmatrix projects. 

He credits his staff for find- 
ing ways to bring efficient technology 
to charities worldwide. “To make an 
operation like this to work, you really 
do need high-quality, dedicated staff,” 
McCallum says. “We have people who 
have made a career decision to help 
people, and they’re doing it with their 
expertise and technology.” @ 56753 





Pratt is a Computerworld contributing 
writer in Waltham, Mass. Contact her at 


| marykpratt@verizon.net. 


TRAINING THE TRAINERS 


FROM THE START, Aidma- 1 
trix officials knew they couldn't 
just hand out i2’s commercial 
products to nonprofits and 
expect them to work. 

“These solutions are still 
highly complex to configure. 
It required very specialized 
skills,” says Keith R. Thode, 
Aidmatrix's chief operating 
officer. Most nonprofits don’t 
have the skills to manage the 
commercial systems. 

And Aidmatrix officials 
knew they had to learn from 
the nonprofits they wanted to 


Thode says. 


serve. Thode says the North 4 
Texas Food Bank staff helped ; 
teach Aidmatrix staffers and 
volunteers about nonprofits’ 
structure, culture and proc- 
esses as well as the regula- 
tions that govern them - all 
of which allowed Aidmatrix to 
customize user-friendly tech- 
nology that was “audience- 
appropriate.” 

“It was a real partnership,” 


Aidmatrix workers also 
adopted a “train the trainers” 
system to ensure that their 


nonprofit clients would bene- 

fit from the technology, Thode 
: says. Aidmatrix worked with 

i America’s Second Harvest - 

1 the Nation's Food Bank Net- 

1 work in Chicago to develop 

1 the Choice System, software 

: that allows food banks to pull 
j donated products from a 

1 shared system based on their 
1 needs. As part of this sum- 

! mer's rollout, Aidmatrix 

: trained agency staffers who 

4 can now work with the 235, 

1 food banks within its network. 
i - Mary K. Pratt 





Simplify your |.T. and your business. IBM servers and storage are designed to 
help you do just that. Take the IBM TotalStorage” DS4100 Express with DACstore. 
It can help you reconfigure or add capacity while staying up and running. 
No need to stop to reset drives. 


Because with IBM Express, innovation comes standard. That's true for servers, 
storage and printers. What's more, you can keep your technologies current 
while helping to reduce costs — through IBM Global Financing. 


All things considered, an I.T. hero deserves nothing less. 


MEET 3 HEROES IN THE BATTLE AGAINST !.T. COMPLEXITY. 
YOURE THE 4TH. 


IBM TotalStorage DS4100 Express 


$7,349* 


(Other configurations as low as $6,599) 
IBM Financing Advantage 


$206 


ibm.com/ 
Saag C4 : 


IBM eServer OpenPower 720 Express IBM TotalStorage 3580 Express 


$5,850* 


$164 





44 COMPUTERWORLD October 10, 2005 


QUICK HITS 


How India Stacks Up 
How does your company’s 2005 budget 
compare with its actual spend in 2004? 
INDIA 


Higher 


Hioner EY 


BASE: 48 indian, 613 North American and 383 Euro- 
pean IT decision-makers 


Note: Percentages may not equa! 100 due to rounding 


Which of the following best describes the 
current status of your full-time IT staff? 


au 


Holding flat 


67% 


Holding flat 


ee 


tiga Ta 


Holding flat 


BASE: 48 indian, 613 North American and 383 European 
IT decision-makers 


Note: Percentages may not equal 100 due to rounding. 


SOURCE: Forrester Research Inc.. Cambridge, Mass. 
August 2005 
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Leveraging the 
Risk/Reward Contract 


ISK/REWARD CONTRACTS are highly spe- 

cialized and require careful and creative 

management. They take extra time and 

effort to construct [QuickLink 46411], but 

in the right circumstances, they can pro- 
vide benefits that more than compensate for that 
additional effort. These contracts motivate suppliers, 
through substantial penalties and incentives, to achieve 
your desired results faster and more effectively. 


As an example, the 1994 
Northridge earthquake de- 
stroyed significant portions 
of the Santa Monica freeway. 
The damage increased trav- 
el time for some commuters 
by more than two hours one 
way. The California Depart- 
ment of Transportation 
(Caltrans) created a risk/ 
reward contract to speed 
the reconstruction effort. 

The contract specified 
a penalty of $200,000 for 
every day the freeway re- 
mained closed past the 140 
days that Caltrans engineers 
estimated it would take to 
rebuild the road. This was 
balanced by an incentive of 
$200,000 for every day the freeway was 
opened ahead of schedule. The result 
was that the freeway was reopened in a 
record 66 days, earning the construc- 
tion firm a bonus of $14.8 million. 

Managing risk/reward contracts 
often presents special challenges that 
demand a creative approach to project 
management. If you have signed such a 
contract, consider the following tips: 

® Give your supplier enough control to be 
successful. Remove as much bureaucra- 
cy as possible by providing creative so- 
lutions to common project roadblocks. 
As part of the Northridge reconstruc- 
tion, for example, Caltrans arranged to 
have inspectors from the Federal High- 
way Administration available around 


Di 
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the clock. As soon as a 
piece of work was complet- 
ed, the inspectors approved 
the work and the construc- 
tion company was able to 
move immediately to the 
next task. Removing the 
normal inspection delays 
greatly reduced the total 
construction time. 

= Communicate project ben- 
efits continually. It’s critical 
to keep perceptions aligned 
when large incentive pay- 
ments are involved. Other- 
wise, some people may per- 
ceive the incentives as un- 
fair once the project is com- 
plete. For example, before 
the reconstruction of the 
Santa Monica freeway started, Caltrans 
calculated the cost of the closed free- 
way at $400,000 per day. But when the 
bonus was paid, a number of groups 
complained about the “excess profits” 
the construction firm received. Cal- 
trans defended its supplier and said it 
was glad to see the contractors receive 
the deserved incentive payments. If 
your supplier meets the criteria for in- 
centive fees, pay the bonus as agreed; 
don’t quibble or whine. After all, you 
received the benefit specified in the ini- 
tial contract. 

@ Review metrics regularly. Don’t wait 
until incentive payments are due to dis- 
cover that you have differing percep- 
tions of success. Review metrics with 


sg 





your supplier on a continual basis. 

@ Share data freely. This may be un- 
comfortable for both parties, but it’s 
often necessary to ensure proper pay- 
ments. For example, measuring the ben- 
efits of a new inventory management 
system may require sharing some infor- 
mation that’s normally closely guarded, 
such as inventory volumes, costs or 
turns. Similarly, the operator of an out- 
sourced server center may be uncom- 
fortable disclosing the current cost of 
its servers, since risk/reward contracts 
often have provisions to share savings 
resulting from reduced costs of hard- 
ware, software or telecommunications. 

® Align HR practices with project goals. 

If your supplier plans on paying incen- 
tives to its staff, be prepared to pay 
equivalent bonuses to any members of 
your staff who will work closely with 
the supplier and perform similar jobs. 
It may require a special exemption 
from human resources if your company 
doesn’t normally pay bonuses to em- 
ployees below a certain level. This 
won't be a concern in the case of wholly 
outsourced functions, but it will need to 
be considered in highly interactive proj- 
ects that are jointly executed. 

® Don’t be overly legalistic. Create a rela- 
tionship with your supplier that fosters 
trust and cooperation. Risk/reward 
contracts work best when the two par- 
ties share a high degree of trust and a 
common goal — yours! Be prepared 
to be flexible in order to achieve your 
desired results. 

Risk/reward contracts add an extra 
dimension to all aspects of project 
management. In return, these contracts 
allow you to leverage the skills of your 
suppliers effectively while requiring 
them to share your risk. Use risk/ 
reward agreements to align your sup- 
pliers’ goals with your own and moti- 
vate the suppliers to outperform the 
terms of their contracts. @ 56946 


WANT OUR OPINION? 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 





YOUR JOB IS TO KEEP SYSTEMS AND APPLICATIONS RUNNING. 
OUR MISSION IS TO KEEP PEOPLE AND INFORMATION CONNECTED. 
LET’S WORK TOGETHER. 


Continuous access to information no matter what. That's 
Information Availability. It's what your employees, suppliers and 
customers demand every minute of every day. But to deliver it 
flawlessly, you need a massive global infrastructure, redundant 
systems and diverse networks being monitored and supported 
by skilled technica! experts at secure facilities. That's exactly 
what SunGard provides. 


As a result, we can offer you a higher level of availability and 
save your company, on average, 25% versus building the 
infrastructure yourself. Plus, it’s a vendor neutral solution that 
lets you control your data, applications and network while giving 
you the flexibility to adjust to the changing needs of your 
business. But best of all, it lets you spend more time solving 
business problems and less time solving technical problems. 


For years, companies around the world have turned to 
SunGard to restore their systems when something went 
wrong. So, it’s not surprising that they're now turning to us 
to mitigate risk and make sure they never go down in the 
first place. 


You want your network and systems to always be up and 
running. We want the same thing. Let’s get together. To 
learn more, visit www.availability.sungard.com or call 
1-800-468-7483. 

® | Keeping People 
SUNGARD | teiinbcmtion 
Availability Services | Connected.™ 


“Potential savings based on IDC White Paper, Ensuring information Availability: 
Aligning Customer Needs with an Optimal investment Strategy. 





Senior Java Developer 


Develop & maintain 3 tier 
software projects based on 
J2EE technologies. Req 
B.S. in C.S. or E.E. or relat- 
ed. More than 5 yrs overall 
programming exp. including 
3 yrs EJB, JAVA, DB devel- 
opment. Strong skills in EJB 
JDBC, Serviet, JSP, Web- 
sphere, WSAD, VAJ, DB2 & 

Resume/ad to 

Systems Inc. at 
viatech.systems@verizon.net 


IT Project Manager need 
for all aspects of project 
incl dvipg systms & pro- 
cesses necessary for re- 
cruitment, tracking, plan- 
ning, & execution of key 
co. initiatives; dvip project 
plan estimating tasks, bud- 
get/project cost, assign 
appropriate staff, perform 
analysis tc generate new 
business. Resume to 
GCI, Inc., ATTN: HR, 25 
Airport Rd., Morristown, 
NJ 07960. 


Network and Computer Sys- 
tems Administrator: Adminis- 
trate network computers with 
LAN and WAN capabilities 
create programs tailored for 
restaurant use using VB and 
Foxpro. Req. BS in computer 
science. No prior exp. re- 
quired, but must demonstrate 
ability to perform job through at 
least coursework/project in 
computer networks, Visual 
Basic, and User Interface 
Resume with school transcript 
to: John Wu, Ming Court 
Restaurant, 9188 International 
Drive, Orlando, FL 32819 


Systems Analyst. Analyze 
data processing require- 
ment systems capabilities 
for projected work loads 
Develop LAN for accessi- 
bility security and access 
restrictions. Upgrade ser- 
vers. Tools: Oracle, Unix, 
AutoCAD PCB Designing, 
C/C++. Reg. Bachelor's 
CIS w/1 yr. exp. or 3 yrs 
exp. Send resume to R 
Jayaraman, 15101 Ser- 
bien Ln., Burtonsville, MD 
20866 


Allstate Insurance Co., 
Gigi Shum, Agent locat- 
ed at 10672 Westheimer 
Rd., Houston, TX 77042, 
seeks an experienced 
database administrator 
to implement, adminis- 
ter, maintain, and trou- 
bleshoot insurance ag- 
ency's information sys- 
tem. Send resume to the 
above mentioned ad- 
dress, ATTN: Owner. 


Database Administrator. De- 
signs/codes/tests/implements 
physical data base considering 
physical characteristics, loca- 
tion, amount of space, comput- 
er memory, performance, user 
access method/level using Vis- 
ual FoxPro & database tools; 
answers user questions & de- 
termines impact of data base 
changes on other systems/ 
staff cost. Req. Associates’ in 
Computer Systems Adminis- 
tration, rel./equiv. & 4 yrs. exp. 
Resume to A. Brito, Azutel, 
Inc., 2200 S. Dixie Highway, 
Ste. 506, Miami, FL 33136. No 
calls 


Perfect Order, Inc. seeks Com- 
puter Programmer in our Mech- 
anicsburg, PA ioc. With immedi- 
ate supervision: Provide engi- 
neering design and develop- 
ment expertise to develop and 
deliver software applications 
Supports and/or installs soft- 
ware applications. Participate in 
testing process through test 
review and analysis, acceptance 
testing, and certification of soft- 
ware. Must have B.S. in Comp. 
Science, Information Technolo- 
gy or related field, and 2 yrs rel- 
evant experience. Resume to 
Annette Gilbert, Perfect Order, 
1300 Bent Creek Bivd., Mechan- 
icsburg PA 17050. 


J2 Global Communications 
Inc., leading provider of inter- 
net-based messaging and 
communications services in 
Hollywood, CA. Looking for 
Java Developer for Santa 
Barbara Office. Reviews, an- 
alyzes, and modifies pro- 
gramming systems including 
encoding, testing, debugging, 
and installing to support j2's 
applications. MS or equiva- 
lent required Resumes 
scott.gregor@j2global.com 
or fax (323) 843-9745 EOE 


SAP Consultant, ABAP 
Progr, Design Engg 
(PDM/CAE), Embedded 
Systems, Plant Automa- 
tion & Progr Analysts 
needed for IT firm to 
work at various sites 
throughout US. BS, MS 
or equiv in CS, EE, 
Mech, Bus Adm, Finan- 
ce or related. Pls mail 
resume to HR, 33533 
West 12 Mile Rd, #131, 
Farmington Hills, MI 
48331. 


Systems Analyst: Analyze busi- 
ness data and develop solu- 
tions using MS software prod- 
ucts (Access, Office Suite 
NET, Sql server), Mini-Tab. 
VBA & database tools. Experi- 
enced in applying Six Sigma 
methodologies & statistics to 
improve & reengineer business 
processes. Need Bachelor de- 
gree in Comp. Science or Engg 
Or Information Systems and 2 
yrs of exp. Send resume to H.R. 
Software Solution Group, 1303 
Wainut Hil! Lane, Ste #330. 
Irving, TX 75038, E-mail 
gcresponse@ssgusa.com. 
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should advertise your recruitment 
message with IT Careers. 


IT Careers Audience Skill Survey 2003/2004 


IIS/MIS/IT 

Windows 2000 

TCP/IP 

Windows 95/98 

PC/s 

Unix NET/Linus 
Networking/Telecom 
Windows NT 

Windows XP 
Internet/Web Dev./E-Com. 
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Your direct line of 
communication to qualified IT 
Professionals with the most in 


demand IT skills 


Contact us: 800-762-2977 
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Programmer Analyst sought 
by Cyberthink, Inc., in Brid- 
gewater, NJ. Must have 
bachelor's deg. or equiv. 
edu. in Computer Sc./Com- 
puter Applications & 2 yrs 
relevant exp. in .Net, C# 
Cognos, TSQL, and MDX 
technologies. Frequent tra- 
vel to client sites required 
Resumes to: Cyberthink 
Inc, Job Code # CT-1, 1125 
US Highway 22 West, Brid- 
gewater, NJ 08807. EOE 


Synerzy Software Solutions 
Inc., needs Computer Software 
Engr w/exp in SAP , SAP BW 
and EP6.0, BaaN, databases 
and unix. Analyze, design. 
implement and troubleshoot in 
above areas and SAP Fi, SD 
MM. Experience in SAP Sec 
urity. Preferably Certifications in 
above areas. BS or BE or Equal- 
ing Degree plus 5 yrs exp req'd 
depending upon the position. 
For some positions we aiso ac- 
cept any suitable comb. of edu- 
cation & exp. Frequent travel 
and/or relocation required. Send 
resume & salary req. to HR 
Manager, Synerzy Software 
Solutions Inc, 1 Austin Ave, 2nd 
Floor, Iselin, NJ 08830 or 
jobs@synerzy.com. 


COMPUTER FORENSICS 
MANAGER 


Coordinate activities in comput 
er forensics. Supervise investi- 
gations into computer related 
crime. Direct daily operations of 
department, analyzing workflow, 
establishing priorities, develop- 
ing standards and setting dead- 
lines. Train new computer foren- 
sic investigators. Assign and re- 
view the work of computer foren- 
sic investigators. 

MIN REQ: 5 YEARS EXPERI 
ENCE IN POSITION OFFERED 
LOCATION: TAMPA, FLORIDA 
Submit resume to: Henry Hsu 
C.A.O., First Advantage Core- 
Facts, LLC, 14030 Thunderbolt 
Place, #700, Chantilly, VA 
20151 


Software Engineer 


MS CS/MIS with exp. in 
customizing and configur- 
ing Peoplesoft Financials 
modules alongwith Com- 
mitment Control function- 
ality. Must also have 
experience with Together- 
Soft, UPK Toolkit 


Techorbit, Inc. 
635 Fritz Drive, Suite 105 
Coppell, TX 75019 


Hyland Software, Inc. seeks 
qualified Quality Assurance 
Systems Analyst (QA-SJC) 
and Programmer Analyst (PA- 
SJC) to work in Cleveland 
OH. Please apply online at 
http://jobs.onbase.com must 
reference job Code where 
indicated to be considered or 
send resume to HR Depart- 
ment, 28500 Clemens Road 
Westlake, Ohio 44145. Must 
reference job code in cover 
letter. EOE 


Principal Solutions Architect 
needed by Momentum Software 
Inc. of Austin, TX (job requires 
travel to various client sites with- 
in USA). Responsible for impie- 
mentation of SAP NetWeaver 
and ESA adoption programs and 
the development of supply chain 
applications on SAP web appli- 
cation server. Requires Masters 
degree in Applied Computer 
Science and 3 yrs exp in devel- 
opment of supply chain applica- 
tions on SAP web application 
server. To apply, mail resume to 
Melissa Dean Momentum 
Software, 4515 Seton Center 
Parkway, Austin, TX 78759 
Refer to Job #15-J 


Programmer Analysts sought 
on an ongoing basis for pro- 
jects throughout the U.S.., will 
specialize in SAP, Oracle, or 
other technologies and disci- 
plines, to develop, create 
modify and implement cam- 
puter systems, application 
software and specialized utili- 
ty programs to meet client 
needs. Excellent benefits and 
salary commensurate with 
experience. Send resume to 
Recruitment Coordinator, Ref 
Code 0302, 4400 Campbells 
Run Road, Pittsburgh, PA) 
15205; EEO/AAP/M/F/V/H 


EDS is looking for an Applied 
Specialist for its Troy Michigan 
location to design, program and 
deploy machine controls, pro- 
cess controls, industry automa- 
tion and Supervisory Controls 
and Data Acquisition solutions. 
Requires Bachelors degree in 
Mechanical Engineering or 
Computer Science and two (2) 
years of experience in providing 
SCADA, HMI and Controls solu- 
tions using RSLogix, ProWorx 
and Cimplicity. To apply, submit 
resume to David Koepf, Manag- 
er, Common Systems Integra- 
tion, EDS, 5555 New King 
Street, Troy, Mi 48098; in refer- 
ence to 1106-J 


Ads Placed Weekly 


Didn't find the IT Career Opportunity 
you were looking for? 


Check back weekly for fresh job listings 


placed by top companies looking for 
skilled IT professionals like you! 


it|careers 800-762-2977 


Database Architect. Perform 
daily UNIX admin; performance 
tune UNIX, Oracle, & app envi 
rons; & dvip & improve proce 
dures & architecture. Reqs MS 
in IT, CS, Eng, or closely related 
+ 3 yrs exp in UNIX admin, app 
performance tuning, & database 
architecture or 

Eng. or closely 

exp in UNIX admin 

mance tuning, and 
architecture. Reqs ability to: 1 
support speci: = apps inci 
Banner & SW tools incl Tivoli & 
TSM; 2) perform UNIX shell & ¢ 
prog. Reqs knowledge of 
Pro*C, COBOL, & S 

cants w/ any suitable 
educ/training/exr 

ply: Mgr HR/SV 

100 Weybosset 

ence, RI 02903 


Software Engineer 

seeks applicants for the position 
of Software Engineer in Denver 
CO to engage in full life-cycle 
software application develop 
ment and enterprise wide inte- 
gration of diverse software appli. 
cations. Requirements include 
master's degree in computer sci 
ence and working knowledge of 
Object Oriented Design tech- 
niques, J2EE, JSP, JAVA, C++ 
Serviets, Python and PERL 
scripting, WebLogic Web- 
Sphere, relational database 
management systems, XML 
UML and automated testing 
tools. Respond by resume to 
Mary Beth Ostasz, Boldtech 
1050 17th St 11th Floor. 
Denver, CO 80265 


Systems Analyst/ 
Programmer 


Send Resume to 
Rick Roberts, 
GCAP _ Services 


” 


Ste 
Irvine CA 92612. 


OPERATIONS 
RESEARCH ANALYST 


Qualitative and quantita- 
tive analysis of opera- 
tional & management 
problems. Masters Op- 
erations Research or 
Computer Science. Sub- 
mit resume to Fanner 
Tech USA Corp., 835 
Lawson St., City of Ind- 
ustry, CA 91748 or Fax 
(626)810-9881 


St. Jude Physical Therapy 
& Rehabilitation Services 
Inc., located in Houston, 
TX seeks an experienced 
Programmer-Analyst to 
install, test, maintain and 
monitor computer pro- 
grams and system. Send 
resume to: President, 
6161 Savoy Dr., Ste. 246, 
Houston, TX 77036 


Computer Professionals, Port 
Jefferson, NY IT firm IT Manager 
Lead Developer/Technical Pro- 
gram Manager Designs complex 
comp prgrms req in depth knwi 
of an organizations operating 
procedures & infor technigy ca- 
pability. Provides tech! support 
to & may lead /manage a group 
of software/systems dvipers: 
engrs/analysts toward project 
goals and completion. Plans 
dsgns, modifies, dviops & im- 
pimnts soft/w-progmng applics 
Dviops software reqmnts & 
specs. Also work with customers 
& the mrkting group to design 
and develop software for specif- 
ic customer applications. Soft- 
ware Engineer/Programmer An: 
alyst/System Analyst Reviews 
analyzes, dsgns, prgrms, modi. 
fies, dviops and impimnts soft 
ware-programming applics & 
soft/w products. Writes code and 
complete programming, and 
testing of systems & applicns. 
Converts project specs & proce 
dures to detailed logical flow 
charts for coding into comp lan- 
guage. Works w /customers & 
mrktng to dviop new or custom 
fea tures to s/ware products/ser- 
vices. Apply to HR Objectsoft 
Group Inc., 646-5 Main Street, 
Port Jefferson, NY 11777. 


Network Engineer. Perform data 
network design, installation and 
maintenance for customers and 
company network; configure and 
maintain services on Internet- 
connected TCP/IP network 
monitor public and private net- 
work. Must have Bachelor's in 
Computer Science, Engg. or 
related; and 2 yrs experience 
maintaining and designing data 
networks. including system 
administration, network imple 
mentation and maintenance 
and program development. Must 
have knowledge of BSD & 
Solaris UNIX, Windows NT. 
Internet Protocols, and hard. 
ware integration and testing 
Must be proficient with Xyplex 
and CISCO routers and switch- 
es, and CCNP or equivalent 
experience. Send resume to 
Local Internet Service Company 
Attn: Gillian Peirce, 108 W. 
Palm, Fairfield |A 52556. 


Career opportunities CA & vari- 
ous sites as necessary for Jr, Sr 
Lead Programmer Analysts: an- 
alyze, design, develop & main 
tain mainframe & multi-tier arch 
systems. Req: MS or BS (or for 
eign equiv) in Science, Engg. 
Business Admin or related, and 
1 to 5 yrs exp in various fields 
such as COBOL, DB2, IMS 
CICS, MVS, JCL, COOLGEN. 
COGEN, VB.Net, ASP.Net, C# 
SQL,, COM+, ORACLE, PSP, 
Java, EJB, J2EE, RUP, EAI 
tools like MQ Series, Vitria etc 
Data warehousing and ETL tools 
like Cognos, Informatica, Micro 
strategy Enterprise level 
Systems Admins for Windows 
and UNIX. Mail resumes to 
Prelude Systems Inc, P.O. Box 
5558, Diamond Bar, CA 91765 
or post your resume at 
http:// careers.preludesys.com 


Network Engineer (Phoenix, AZ) 
Global Crossing Telecommuni- 
cations, Inc. is looking for a Sr. 
Routing Network Engineer to 
provide qity assurance & cus- 
tomer support of tier one-busi- 
ness initiatives; provide tech’! 
support for systms or n/work 
related probiems; perform inte- 
gration testing & turn up of new 
niwork devices; & dvip tech'l 
reqmts & specs for complex 
niwork elements. BS in info 
Tech. or equiv. comb. of educ 
training & exp. wimin. of 5 yrs 
exp. with network/backbone lev- 
el. Pursuant to Network Security 
Agreement, only US citizens 
may be assigned to this position. 
Network Security Level Screen- 
reqd. Respond to: Kris 
Global Crossing Tele- 
communications, Inc., 435 W. 
Commercial St., East Rochester, 
NY 14445. 


Computerworld - October 10, 2005 


} PUGET SOUND ENERGY 


Puget Sound Energy (P 
ing applicar to fill the pos: 
in Bellevue, WA. In order t 
plete an online applicatior 


resume 


Sr System Analyst 1693 
Closes 10/31/05. Maintain 
and procedures for PSE 
Responsible for the 

Risk System network 

Any suitable combination 
KWI Energy Risk Syster 
able 


Pp 
Ss an Equal Opportu 


backgrounds to apply 


Xtreme is looking for 
Professionals (multip! 
ings) having Masters De 
equivalent in CS. MIS 
Math, Tech, Bus, Engineering, or 
related with a minimum of two 
years of experience in informa- 
tion technology area. Responsi 
bie for architect, analysis, des 
ign, develop, and implement ap- 
plications and systems using 
various applica S and tools 
Must have experience in any of 
the following skills sets: 1. Ab 
Initio Configuration Manage 
ment, Shell Scripts, Ab initio 
GDE, Java, C++, VB.Net. ASP 
Net, PL/SQL, Oracle, Toad, Ra 
tional Clear Quest, Mercury Test 
Director, Siebel, Unix, and Win- 
dows NT/2000. 2. VB.Net, ASP 
Net, VS.Net, write VHDL code 
for prototyping ASIC design 
PL/SQL, Oracle, Sybase, and 
SQL Server. 3. Weblogic, Web. 
Sphere, !IS, Oracle, Sybase 
SQL _ Server VC++ S++ 
Bounds Checker. Rational 
Rose, MFC, Peri, Unix, and Win 
dows NT. 4. J2EE. Java, Java 
Swing, Silver Stream, Novel 
Extend Application Server, SQL 
SQL Server 2000, Oracle, Coid 
Fusion, C++, and Windows NT 
XP/2000. 5. Develop SOL Tran 
slator that can convert SQL 
queries to database specific 
syntax, J2EE, MS.NET, C++ 
COM/DCOM, VB.Net, C#, Web 
Services, Ora WebSphere 
Weblogic, Novell Extend, C++ 
and Windows NT/XP/2000. 6 
Java, CORBA, C++, XML, DSL 
FP, Link, Oracle, Informix, SQL 
Server, Toad, Visual Café, Ra 
tional Rose, VSS on Unix, Linux 
and Windows NT/2000 (Requir 
es only one year of experience 
for this skill set). 7. PeopleSoft 
Oracle, PeopleSoft HRMS and 
CRM Applications including HR 
Payroll, and Benefit modules 
Unix, Windows NT, PeopleSoft 
Application Designer, People 
Tools, People Code, SOR, Appii- 
cation Engine, Component Inter 
face, UNIX shell Scripts, Crystal 
reports, and Business Objects 
squires only one year of expe. 
rience for this skill set). Will pro- 
vide a competitive salary and 
benefits. Email resume to 
careers@xtremews.com or mail 
to Xtreme Worldwide Solutions 
Inc 76 Northeastern Bivd 
Suite 29 A, Nashua, NH 03062 


COMSYS 


With 35 branch offices located 
across the US, COMSYS is 
actively recruiting for the foilow- 
ing positions 


Software Engineer metro 
Portland, OR - Code # PO110 
Software Engineer - metro Salt 
Lake City - Code # SL110 
Systems Administrator - metro 
Wilmington, DE - Code # Wi100 
Quality Assurance Analysts 
metro Buffalo Grove, IL - Code # 
BG100 

Programmer Analyst - metro 
Washington, DC Code # 
AR100. 


Roving employment to varying 
jobsites throughout the US 
Piease refer to appropriate job 
code when submitting resume 
to: COMSYS, Attn. Nancy 
Theriault, 15455 N. Dailas 
Pkwy., Ste 300, Addison, TX 
75001. EOE./MF/DV. 


) having Masters 
equivalent in CS, Ml 
Math. Tech. Bus. Commerce 
Engineering, or related with a 
minimum of two years of experi 


ence in informatior >chnology 


area. Responsible f 


design, develop. implement ap 


ior analysis 


plications and systems. Invoive 
in Enterprise Application Integra: 
tion of various systems, applica 
tions and tools. Must have expe. 
rience in any of the following 
skilis sets: 1.Oracie, DB2, Infor 
matica-Power Center, Erwir 
Cognos-impromptu, Java, XSLT. 
Com+, Xceed, on Unix, and 
Windows NT/2000. 2 Jracle 
DB2, Informatica-Power Center 
Erwin, and Cognos-irmpromptu 
Developer 2000, Java Script 
Visual Basic 
Unix, and Windows NT/200( 
3. Informatica Mapplets, Reus 
able Transformations and Mar 
pings, Informatica Power Center 
with Repositor ver, ETL 
Data M 

DB2, Cognos 

ess Objects, TOAD 

Builder, Erwin, Unix and W 
ows NT/2000. 4. Informatica, Er 
win, Cognos-impromptt acie 
PeopleSoft, DB2, Java, Tuxedc 
Forms6i, SQR, People Tools. 


Unix, 2 5 


Shell Scripts. on 


Vignette I yhere 
ang ASL, Java 

SSL TCPIIP, O 
J2EE, Developer 

Shell Scripts, on Unix 

Jows NT/2000. 6. Resez 

sign, scope, confi 

neer, and develop computer 

software systems in SAP R/3 

Oracle, ABAP/4, SAP Script 

Perform functional and technical 

implementation and configura 

tion of SAP R/3 modules such 

as Basis, Service Management 

Materiais Management, Finar 

ce, Controlling, and Production 

Planning. Manage disaster reco. 

very process for SAP R/3 

Application. 7. Oracle, DB2 

formatica-Power Center, Erwir 

Cognos-impromptu, Java, XML 

Peri, Shell Scripts. 

Windows NT/2 

only one year 

this skill set). Will 

petitive salary and oenefits 

Send Resume to: Ajel Technolo. 

gies, 347 Plainfield Avenue 

Suite # 108, Edison, NJ 

or email to: careers@aijel.com 


Accordant Health Services has 
opening for Lead IT Analyst to 
code, test, and integrate soft 
ware enhancements to corpo 
rate systems, & provide sup 

of corporate internet/intranet 
sites, using object oriented tech 
niques and the following lan 
guages/technologies: NET & 
ASP.NET Framework (including 
C# and Java) 
(Visual Basic, Object Oriented 
DBMS & tools), Visual Age 
WebOjects, Unix Administration 
and Visual Studio. Candidates 


Client/Server 


for this position must possess 
knowledge of these languages, 
technologies, a BS in computer 
science & 3+ yrs business pro 
gramming experience. Provide 
resume Accordant Health 
Services, ATTN: IS Director 
4900 Koger Bivd, Suite 300 
Greensboro, NC 27407 
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Virtualization — 


change,” he said. 

Armstrong said the new pro- 
vision won't necessarily lead 
him to run SQL Server on ma- 
chines that are equipped with 
VMware’s ESX software, since 
virtualization doesn’t work 
well for highly transactional 
databases and other CPU- 
intensive workloads. But the 
modified licensing might pro- 
vide a way to reduce hardware 
costs on small, nontransaction- 
al database servers, he added. 

Alvin Park, an analyst at 
Gartner Inc., said vendors 
have largely been applying old 
licensing models to virtualiza- 
tion software, often leaving 
customers confused about 
what they need to buy. Micro- 
soft is stepping to the fore- 
front in announcing new li- 
censing policies for virtual- 
ized software, he added. 


Variable Benefits 

But there are cases where com- 
panies could wind up paying 
more money under the new 
model, Park said. For example, 
if a user runs six virtual in- 
stances of a product such as 


OOOO eRe H He D eR eeesenaeasee 


= Users will no longer have to li- 
cense every inactive or stored vir- 
tual instance of a Windows Serv- 
er System product. They can cre- 
ate unlimited instances and pay 
only for the maximum nurnber 
running at any given time. 


CORRE eH eee Tee eE Ee eTEEEeee 


a Users can move active in- 
stances of a Windows Server 
System product from one li- 
censed server to another within 
90 days of the last reassignment, 
as long as both physical servers 
are licensed for the software. 
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BizTalk Server on a four- 
processor box, it would have 
to pay for six BizTalk licenses. 
Under Microsoft’s existing li- 
censing policy, the maximum 
number of licenses that a cus- 
tomer has to buy for one appli- 
cation is equivalent to the total 
number of processors in the 
box, Park said. 

Microsoft struggled with 
that fact, said Zane Adam, a 
director of marketing in the 
company’s Windows Server 
group. But, he added, it’s un- 
likely that a customer would 
slice up a box to the level 
envisioned by Park with a 
mission-critical application. 

The new licensing options 


Japanese Bank Expects Server 
Consolidation to Save It Millions 


_NEWS 





are due to become available 
Dec. 1. Another tweak being 
announced by Microsoft will 
let users run up to four virtual 
instances of the upcoming 
“R2” Enterprise Edition of 
Windows Server 2003 on one 
physical server for the cost of 
a single instance. If they use 
Virtual Server or VMware's 
GSX software, the R2 host op- 
erating system is included as 
well, Adam said. 

Adam acknowledged that 
most customers now run the 
standard edition of Windows 
Server 2003. But he said he 
thinks that they will increas- 
ingly consider the more scal- 
| able Enterprise Edition as they 





Virtualization helps Sumitomo Mitsui 
reduce total number of physical servers 


BY LUCAS MEARIAN 
Sumitomo Mitsui Banking 
Corp. has consolidated 149 of 
its physical servers into 14 
blade servers, an effort that IT 
officials expect will save the 
company millions of dollars 
over the next three years. 

Sumitomo’s IT operation 
began evaluating options for 
updating its servers in January 
of this year, said John Premus, 
chief technology officer at 
Japanese Research Institute 
America, the IT arm of the 
Tokyo-based bank. 

The New York-based IT 
unit needed to reduce the 
complexity of its server envi- 
ronment, increase utilization 
and lower operational costs, 
Premus said. 

In order to determine 
whether to virtualize the 
servers, IT personnel calculat- 
ed the cost of replacing the ex- 
isting systems. 

Premus looked at the cost of 
new hardware, software and 
maintenance. “We used our 


and other mailing offices. Posted under Canadian International Publication agreeme: 


mission to reprint may be purchased from Renee Smith, Computerworld Reprints, c/o Reprint Management Services. 
www.reprintbuyer.com. E-mail: reprints®computerworld.com. Requests for missing issues will be honored only if re 
$250 per year: Europe - $295 per year; all other countries ~ $295 per year. Subscriptions call toll-free (888) 559-7327. POSTMASTER: Send Form 3579 (Change of Address) to Computerworld, PO Box 3500. Northbrook, If, 60065-3500 


ed within 60 days 


actual cost for floor space and 
[for] power and cooling, and 
used a number for labor costs 
to build a new physical server 
[network],” he said. 

Premus decided to virtual- 
ize servers with 30% CPU 
utilization rates or less. The 
IT group initially found that 
136 of the 222 servers in the 
U.S. were good candidates 
to become virtual servers. 
Since then, that total has 
grown to 149. 

In February, Sumitomo in- 
stalled an IBM blade server 
rack and connected it to its 
back-end storage-area net- 
work. Over the next three 
months, Premus rolled out 
VMware Inc.’s virtualization 
software on the blade servers 
and eventually created 216 vir- 
tual servers on 14 physical 
blade servers. Those systems 
replaced the 149 servers. 

Dan Kusnetzky, an analyst at 
IDC in Framingham, Mass., 
said the number of consolida- 
tion projects like the one at 











2 date. Subscription rates: $5 per copy: U.S. 


move to heavier processing 
workloads and seek out the 
fail-over and clustering capa- 
bilities that come with that 
version. 

In addition, in some cases 
Microsoft’s new licensing pol- 
icy could enable users that 
virtualize servers to upgrade 
to the R2 Enterprise Edition 
for roughly the same price 
they would have to pay to buy 
four Standard Edition licenses. 

Armstrong said that all of 
the Windows guest operating 
systems on his ESX-based 
servers are Standard Edition 
and that he doesn’t expect to 
switch to R2 Enterprise Edi- 
tion. “The training and sup- 


Sumitomo Mitsui is growing 
at a rapid clip. 

The virtualization market as 
a whole totaled about $19.2 bil- | 
lion in 2004, Kusnetzky said, 
with virtual machine software 
accounting for $330 million of 
that amount. Sales of such 
software grew by 62% last 
year, he said. 

Kusnetzky warned that as 
the demand for virtual servers 
grows, IT executives should 
make sure that their virtual 
environments actually simpli- 
fy operations. 

“The issue is that as you 
move to a consolidated envi- 
ronment, one must be very 
careful not to replace physical 
complexity with virtual com- 
plexity,” Kusnetzky said. 

Premus agreed, saying that 
virtual “server sprawl” — 
adding servers whether they 
are needed or not — is just 
as much of a problem in a vir- 
tual environment as it is ina 
physical server environment. 
“It’s become too easy to provi- 
sion servers. I don’t know if 
it’s a good problem to have or 
a bad one. Before, it took us 
three to five days to provision 
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port and administration that 
go into the enterprise edition 
of Windows is beyond what 
we want to scale up for,” he 
said. “It’s not a strategic path 
for us.” 

But Michael Brown, a sup- 
port services manager at Den- 
ver Health and Hospitals Au- 
thority Inc., said the licensing 
change might cause him to 
look at R2 Enterprise Edition. 
All of the 25 Windows guest 
operating systems that Denver 
Health currently runs on com- 
puters with Microsoft’s Vir- 
tual Server are Standard Edi- 
tion, according to Brown. 

The host is Enterprise Edition. 


@ 57360 


one server. Now [we] can do 
15 to 20 servers in 15 minutes,” 
he said. 

Premus said he hasn't in- 
creased CPU utilization as 
much as expected — most sys- 
tems are topping out at 40%. 

Nonetheless, he said that 
the low utilization rates 
haven't been a problem, be- 
cause the additional CPU cy- 
cles are used for business con- 
tinuity and disaster recovery 
operations. He noted that 
VMware's VMotion migration 
software can re-create an in- 
stance of a blade if another 
one fails, without disrupting 


applications. @ 57370 
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Tl: No Excuses 


AST MONTH, writing about the devastation of Hurricane 

Katrina, I said in passing, “Thousands of people are dead 

or dying” [QuickLink 56681]. One reader wrote to object 

that he couldn’t believe anything else I said in that column, 

since I led off with an “obvious falsehood”; at the time, 
there were fewer than 700 confirmed dead. 


Anger Management 


This branch office manager has a nasty habit of hitting 
the speakerphone’s mute button when he gets angry 
during meetings. “He'd then hop up and down, curs- 
ing a blue streak,” says a pilot fish who's seen it. “Then 
one meeting, the videoconference room was the only 
room available. Once again he got angry, hit the mute 
button and hopped up and down cursing a blue 
streak. It took almost a full minute before one of his 
employees got his attention and pointed to the moni- 
tor. The headquarters attendees were all staring open- 
mouthed at him. He recovered very quickly - and he 


Last week, they stopped actively looking for Katrina’s dead. The 
confirmed death toll: just over 1,200 people. I’m glad to report I was 
wrong: It wasn’t “thousands.” Do I regret the error? I just wish my 
estimate was completely wrong, and the death toll was zero. 

Now let’s cut through the self-righteous silliness, shall we? 


Much of the mail I got after that column was 
about politics. Those readers thought it was a 
political attack on the Bush administration. 
Some approved. Others disapproved. They 
were ali wrong. 

It wasn’t about politics. It was about IT peo- 
ple, and how we should respond when we 
screw up. That response should never be de- 
nial, or excuses, or a shuck and jive. And some- 
times when our screw-up hurts people, it 
should be shame. 

One of the first messages was from an IT guy 
at FEMA, who couldn’t find the error page I 
mentioned (“In order to use this site, you must 
have JavaScript Enabled and Internet Explorer 
Version 6....”). I sent back a walk-through of 
how I got the error. 

He thanked me and then explained how the 
IE 6-only site came to be: It was a project in its 
early stages that was kicked into high gear after 
2004’s four Florida hurricanes. It took a huge 
effort and required endless bureaucratic hassles 
to get every word appearing on the site ap- 
proved. And when push came to shove, the site 
had to go live with only IE 6 support. 

In other words, FEMA's IT people 
knew the site wasn’t everything it 
should be. They had to choose be- 
tween an aggravatingly not-good- 
enough site or no site at all. And 
they weren’t happy about having to 
make that choice. 





ress in fixing disasteraid.fema.gov. Today, the 
site works with multiple PC browsers, though 
not yet with Web-enabled cell phones. It was 
wrong, but now FEMA's IT people are doing 
their best to make it right. 

End of story? I wish it was. 

I also heard from readers with horror stories. 
Some were about FEMA and Katrina. Others 
were about other government agencies, com- 
mercial services and private companies that left 
people stranded — in some cases literally — 
because of online systems that required partic- 
ular browsers, particular platforms or particu- 
lar features. 

Their reactions ranged from annoyance to 
fury. They didn’t know why they’d been inconve- 
nienced or put in danger — whether because of 
IT underfunding or bureaucratic fumbling or 
sloppiness or callousness or incompetence. But 
they knew who they blamed. IT did this to them. 

It’s not just a FEMA problem. It never was. 
Once, IT was in the back room. If our systems 
failed, other employees still sat between us and 
the outside world, covering for us. 

But now our systems touch people directly. 
We touch their lives. They depend 
on us, and on the software, net- 
works and servers we create and 
support. That means if we get it 
wrong, we can do real damage to 
our business’s reputation, to the 
bottom line — and to other peo- 


never booked the videoconference room again.” 


Just Like 

You Asked 
This pilot fish 
regularly re- 

ceives lists of 
usernames and IDs to 
add to a system, so he 
lays down the law: All 
requests must be in a 


SHARK 
TANK. 


room. | had it 
with me on my 
trip. . .. Oh, 
oops, ah, never 
mind.” 


_ All Charged Up 
: Help desk gets a call: 
: “User's network charge 


spreadsheet attached to : card has expired, and 


an e-mail, not as text or 
a voice mail. “One per- 
son started sending me 
blank e-mails with at- 


tion,” fish reports. “She 


? utes.” Huh? “When I got 
? on-site, | found her net- 
dead,” says support pilot 
fish. “After | changed 
out the card, she came 


was writing all her mes- 
sages on the spread- 
sheets and attaching 
them to the e-mail.” 


There It Is! 

Sales VP calls support 
pilot fish late one after- 
noon. He’s just returned 
from a long sales trip. 
Now he’s at home and 


: me if | had recharged her 
: card for minutes. | told 
: time for another year.’” 


: Update Time 

: PC support pilot fish is 
: filling in for a netadmin 
: at a remote site and 


wants to remote-control : wants to confirm the 
his office laptop from his : backup procedures. 


home PC to catch up on 


: “After talking to a half- 


e-mail, but for some rea- : dozen people, | obtain 


son he can’t connect. A 
quick check shows the 
laptop isn’t attached to 
the network, and fish 

fears it may have been 
stolen from the office 

while the VP was gone. 


i the key to the adminis- 
; trator’s office, the com- 
? bination to the fireproof 
i safe and the key to the 
: lockbox inside the safe,” 
i Says fish. “There | find 
: the backup plan. I brush 


Do you know where your : the dust off a faded fold- 


laptop is? fish asks. 


: er titled ‘IBM Mainframe 


I think they were right — both in 
the choice they made, and in being 
unhappy with that choice. I’m sorry 
I assumed they were callous. They 
weren't. They were just stuck with a 
bad situation, and their time and 
luck ran out. 

And I’m glad they’ve made prog- 


FRANK HAYES, Coimputer- 
world’s senicr news colum- 
nist, has covered IT for more 
than 20 years. Contact him at 
frank_hayes@computerworld.com. 


ple’s lives. 

We can’t afford to forget that. 
And we can’t afford to hide behind 
excuses, politics or denial. When 
our systems fail to do the job, our 
job is to make that right. 

To do anything else would be a 
real shame. @ 57329 





VP: “Yes, it’s in its carry- : and Punchcard Storage 
ing case in the other ? Procedure.’ ” 
DON'T LEAVE IT ON THE SHELF. Send me your 
true tale of IT life at sharky@computerworid.com. 
You'll score a sharp Shark shirt if | use it. And check out the 
daily feed, browse the Sharkives and sign up for Shark Tank 
home delivery at computerworld.com/sharky. 
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CHANGING THE LANDSCAPE OF 
BUSINESS INTELLIGENCE: 


[Integrating financial management and BI to create the first Business Performance Management system. } 


VISIBILITY. 
PERFORMANCE. 
SUCCESS* 


system, Hyperion System 9 increases productivity while reducing risk and TCO. 
It’s straightforward for IT to integrate with database and transaction systems. 
And it’s even simpler for end-users to learn and use. See the launch webcast: 


Hyperion 


www.hyperion.com/launch 
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